SW User Guide for UE910V2. 1VV Rev

Transcription

1 SW User Guide for UE910V2

2 APPLICABILITY TABLE UE910 Family Software User Guide PRODUCT UE910-EU V2 UE910-NA V2 UE910-EUA V2 SW Version XX4 Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 2 of 103

3 SPECIFICATIONS SUBJECT TO CHANGE WITHOUT NOTICE Notice While reasonable efforts have been made to assure the accuracy of this document, Telit assumes no liability resulting from any inaccuracies or omissions in this document, or from use of the information obtained herein. The information in this document has been carefully checked and is believed to be entirely reliable. However, no responsibility is assumed for inaccuracies or omissions. Telit reserves the right to make changes to any products described herein and reserves the right to revise this document and to make changes from time to time in content hereof with no obligation to notify any person of revisions or changes. Telit does not assume any liability arising out of the application or use of any product, software, or circuit described herein; neither does it convey license under its patent rights or the rights of others. It is possible that this publication may contain references to, or information about Telit products (machines and programs), programming, or services that are not announced in your country. Such references or information must not be construed to mean that Telit intends to announce such Telit products, programming, or services in your country. Copyrights This instruction manual and the Telit products described in this instruction manual may be, include or describe copyrighted Telit material, such as computer programs stored in semiconductor memories or other media. Laws in the Italy and other countries preserve for Telit and its licensors certain exclusive rights for copyrighted material, including the exclusive right to copy, reproduce in any form, distribute and make derivative works of the copyrighted material. Accordingly, any copyrighted material of Telit and its licensors contained herein or in the Telit products described in this instruction manual may not be copied, reproduced, distributed, merged or modified in any manner without the express written permission of Telit. Furthermore, the purchase of Telit products shall not be deemed to grant either directly or by implication, estoppel, or otherwise, any license under the copyrights, patents or patent applications of Telit, as arises by operation of law in the sale of a product. Computer Software Copyrights The Telit and 3rd Party supplied Software (SW) products described in this instruction manual may include copyrighted Telit and other 3rd Party supplied computer programs stored in semiconductor memories or other media. Laws in the Italy and other countries preserve for Telit and other 3rd Party supplied SW certain exclusive rights for copyrighted computer programs, including the exclusive right to copy or reproduce in any form the copyrighted computer program. Accordingly, any copyrighted Telit or other 3rd Party supplied SW computer programs contained in the Telit products described in this instruction manual may not be copied (reverse engineered) or reproduced in any manner without the express written permission of Telit or the 3rd Party SW supplier. Furthermore, the purchase of Telit products shall not be deemed to grant either directly or by implication, estoppel, or otherwise, any license under the copyrights, patents or patent applications of Telit or other 3rd Party supplied SW, except for the normal non-exclusive, royalty free license to use that arises by operation of law in the sale of a product. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 3 of 103

4 Usage and Disclosure Restrictions License Agreements The software described in this document is the property of Telit and its licensors. It is furnished by express license agreement only and may be used only in accordance with the terms of such an agreement. Copyrighted Materials Software and documentation are copyrighted materials. Making unauthorized copies is prohibited by law. No part of the software or documentation may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language or computer language, in any form or by any means, without prior written permission of Telit High Risk Materials Components, units, or third-party products used in the product described herein are NOT fault-tolerant and are NOT designed, manufactured, or intended for use as on-line control equipment in the following hazardous environments requiring fail-safe controls: the operation of Nuclear Facilities, Aircraft Navigation or Aircraft Communication Systems, Air Traffic Control, Life Support, or Weapons Systems (High Risk Activities"). Telit and its supplier(s) specifically disclaim any expressed or implied warranty of fitness for such High Risk Activities. Trademarks TELIT and the Stylized T Logo are registered in Trademark Office. All other product or service names are the property of their respective owners. Copyright Telit Wireless Solutions Co., Ltd. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 4 of 103

5 Contents 1. Introduction Scope Audience Contact Information, Support Document Organization Text Conventions Related Documents Overview UE910 V2 FAMILY Product Specification Basic Operations Command Syntax Command Response Timeout Turning ON/OFF the UE910 V2 FAMILY Checking WCDMA Device Functionality Baudrate SIM Presence Checking Enable the Extended Error Result Codes Query SIM Presence and Status Provide SIM PIN (only if required see point ) Provide SIM PUK (only if required see par ) Network Checking Query Network Status Network Operator Identification Check for Received Signal Strength & Quality Quick Network Status Checking Placing a Voice call Voice Call Device Setup Set the Device in Voice Mode Set the Desired Audio Path Active Set Volume on Speaker Set Microphone Mute Phone Number Dialing Dial a Given Phone Number Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 5 of 103

6 Closing the Voice Call Hang up the Voice Call Placing a Circuit Switched Data (CSD) call CSD Call Device Setup Set the Device in Data Mode Set the Desired Modulation and Speed for the Connection Phone number dialing (data call) Dial a Given Phone Number Closing the Data call Exit the data mode and enter the mode Hang up the data call Answer an incoming Call Data Flow Control Advanced Operations Accessing the Phonebook Preliminary Phonebook Setup Selecting PB Storage Active Enable Fixed Dialing Phonebook Facility (only for FD PB) Phonebook Entry Search by Name Phonebook Entry Read by Index Phonebook Entry Write Phonebook Entry Delete Phonebook Entry Dial Distinguish Calls Identify the Call Type Set the Extended Incoming Call Indication Identify the Caller Set Caller line ID Indication Presentation Restricting Calling Line Indication CLIR Service Status Query Restrict/Allow Caller Line ID Indication Call Barring Control Call Barring Service Status Query Barring/Unbarring All Incoming Calls Barring/Unbarring Incoming Calls When in International Roaming Barring/Unbarring All Outgoing Calls Barring/Unbarring All Outgoing International Calls Barring/Unbarring All Outgoing International Calls Except to Home Country Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 6 of 103

7 Unbarring all the Calls DTMF Tones GSM/WCDMA Power Saving Function Enabling/Disabling the Power Saving Function Power Saving Mode URC Message in Power Saving RI Signal for the Specific Event RI Signal for Incoming Call RI Signal for Incoming SMS RI Signal for Socket Listen RI Signal for Events in Power Saving Mode SMS Handling SMS Device setup Select SMS Format Type Check SMS Service Centre Number Add SMS Service Centre Number (only if required) Select New Messages Indication Behavior Set Text Mode Parameters (only in TEXT mode) Select SMS Memory and Check for Memory Space IRA Character Set Writing a New SMS to Storage Sending an SMS Previously Stored Sending a New SMS Without Storing It Sending a New SMS using GPRS service Deleting an SMS Reading an SMS Listing a Group of SMSs Cell Broadcast Service Reading concatenated SMS Using General Purpose Input/output pins GPIO pin setup Setting GPIO pin as OUTPUT Setting GPIO pin as INPUT GPIO pin use Querying GPIO pin status Setting GPIO Pin Output Status Using GPIO6 pin as ALARM OUTPUT (alternate function) Clock/Alarm Function Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 7 of 103

8 Clock Date/Time Regulate the Clock Read the Current Date/Time Alarm Function Regulate the Alarm Time & Behavior Stop the Alarm Activity Exit from the alarm status and shutdown Exit from the alarm status and enter the normal operating mode Querying the Alarm Status Alarm operation example Packet Switched Data operations Introduction Service and Firmware Update Step-by-Step Upgrade Procedure (TFI) XFP Tool Step-by-Step Upgrade Procedure Document History Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 8 of 103

9 1. Introduction 1.1. Scope 1.2. Audience The scope of this document is to provide a software description of the Telit UE910 Family. This document is intended for customers integrating UE910 Family modules in their project Contact Information, Support For general contact, technical support, to report documentation errors and to order manuals, contact Telit Technical Support Center (TTSC) at: TS-EMEA@telit.com TS-NORTHAMERICA@telit.com TS-LATINAMERICA@telit.com TS-APAC@telit.com Alternatively, use: For detailed information about where you can buy the Telit modules or for recommendations on accessories and components visit: To register for product news and announcements or for product questions contact Telit Technical Support Center (TTSC). Our aim is to make this guide as helpful as possible. Keep us informed of your comments and suggestions for improvements. Telit appreciates feedback from the users of our information Document Organization This document contains the following chapters: Chapter 1: Introduction provides a scope for this document, target audience, contact and support information, and text conventions. Chapter 2: Overview gives an overview of the features described in the document. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 9 of 103

10 Chapter 3: UE910 V2 Family Specification describes in details the characteristics of the product, providing information such as power supply requirements, mechanical dimensions and interfaces specifics. Chapter 4: Basic operations : gives an overview on the basic operations using AT : switch on/off, formatting, response, placing a voice call, etc. Chapter 5: Advanced operations : gives an overview on the advanced operations: access to phonebook, call handling, messages, GPIO setting, alarms, power consumption management etc. Chapter 6: Packet switched data operations : deals on the GPRS data management. It describes Enhanced Easy GPRS features. Chapter 7: Service and firmware update describers the procedure and software tools used to update the firmware of UE910 V2 family. Chapter 8: Document History describers document history for UE910 FAMILY Text Conventions Danger This information MUST be followed or catastrophic equipment failure or bodily injury may occur. Caution or Warning Alerts the user to important points about integrating the module, if these points are not followed, the module and end user equipment may fail or malfunction. Tip or Information Provides advice and suggestions that may be useful when integrating the module. All dates are in ISO 8601 format, i.e. YYYY-MM-DD Related Documents UE910 V2 FAMILY Hardware user guide 1vv UE910 V2 FAMILY AT s reference guide 80419ST10124A Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 10 of 103

11 2. Overview The purpose of this document is the description of some common AT procedures that may be used with the Telit UE910 V2 FAMILY module. In this document, all the basic functions of a mobile phone are taken into account and for each one of them; a proper sequence will be suggested. In the Advanced operation section the more useful services and features of the GSM and WCDMA network supported by the Telit UE910 V2 FAMILY module is taken into account and some sequence and usage are provided for each one of them. This document and its suggested sequences must not be considered mandatory; instead, the information given must be used as a guide for properly using the Telit module. For further s and features that may not be explained in this document refer to the UE910 V2 FAMILY Product Description document where all the supported AT s are reported. NOTE: The integration of the UE910 V2 FAMILY module within user application shall be done according to the design rules described in this manual The information presented in this document is believed to be accurate and reliable. However, Telit Communications S.p.A. assumes no responsibility for its use, nor any infringement of patents or other rights of third parties, which may result from its use. No license is granted by implication or otherwise under any patent rights of Telit Communications S.p.A. other than for circuitry embodied in Telit products. This document is subject to change without notice. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 11 of 103

12 3. UE910 V2 FAMILY Product Specification ITEM UE910-EU V2 UE910-EUA V2 FEATURE UE910-NA V2 Air interface Dual-band UMTS/HSDPA 900/2100 Quad-Band GSM850/900/1800/1900 Dual-band UMTS/HSDPA 850/2100 Quad-Band GSM850/900/1800/1900 Data Service HSDPA DL 3.6Mbps WCDMA UL/DL 384kbps, EDGE UL/,DL 236.8Kbps, GPRS UL/DL 85.6 Kbps, CSD 9.6Kbps NOTE: In the following sections, UE910 V2 FAMILY refers to all UE910 V2 FAMILY products mentioned in the table above. Whenever a and/or feature is referred to a specific model, it is clearly highlighted Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 12 of 103

13 4. Basic Operations 4.1. Command Syntax In the next paragraphs the following notations are used: <cr> represents the Carriage Return Character (13) <lf> represents the Line Feed Character (10) <xx> represents a parameter with changing name is in place of the double x. (< and > characters are only for limiting the parameter and must not be issued to the terminal). [<xx>] represents an optional parameter whatever name is in place of the xx. [ and ] characters are only for limiting the optional parameter and must not be issued to the terminal) Command Response Timeout Every issued to the Telit modules returns a result response if response codes are enabled (default). The time needed to process the given and return the response varies, depending on the type. Commands that do not interact with the SIM or the network, and involve only internal set up settings or readings, have an immediate response, depending on SIM configuration(e.g., number of contacts stored in the phonebook, number of stored SMS), or on the network the may interact with. In the table below are listed only the s whose interaction with the SIM or the network could lead to long response timings. When not otherwise specified, timing is referred to set. For phonebook and SMS writing and reading related s, timing is referred to s issued after phonebook sorting is completed. For DTMF sending and dialing s timing is referred to module registered on network ( AT+CREG? answer is +CREG: 0,1 or +CREG: 0,5 ). NOTE: In case no response is received after the timeout time has been elapsed, then try repeating the last and if still no response is received until the timeout time, an Unconditional Shutdown MUST be issued and the device must be powered ON again. Command +COPS +CLCK +CPWD +CLIP +CLIR +CCFC 15 +CCWA 15 Time-Out (Seconds) 125 (test ) 15 (SS operation) 5 (FDN enabling/disabling) 15 (SS operation) 5 (PIN modification) 15 (read ) 15 (read ) Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 13 of 103

14 Command Time-Out (Seconds) +CHLD 60 +CPIN 30 +CPBS 5 (FDN enabling/disabling) +CPBR 5 (single reading) 15 (complete reading of a 500 records full phonebook) +CPBF 10 (string present in a 500 records full phonebook) 5 (string not present) +CPBW 5 +CACM 5 +CAMM 5 +CPUC 180 +VTS 20 (transmission of full *#ABCD string with no delay between tones, default duration) +CSCA 5 (read and set s) +CSAS 5 +CRES 5 +CMGS 120 after CTRL-Z; 1 to get > prompt +CMSS 120 after CTRL-Z; 1 to get > prompt +CMGW 5 after CTRL-Z; 1 to get > prompt +CMGD 5 (single SMS cancellation) 25 (cancellation of 50 SMS) +CNMA 120 after CTRL-Z; 1 to get > prompt +CMGR 5 +CMGL 100 +CGACT 150 +CGATT 90 D 120 (voice call) A H 60 +CHUP 6 +COPN 10 +COPL 180 +CRSM 180 +WS #MBN 10 Timeout set with ATS7 (data call) 60 (voice call) Timeout set with ATS7 (data call) #TONE 5 (if no duration specified) # D 60 # ACT 150 #S 210 ( context activation + DNS resolution ) #MSCLASS 15 #STSR 30 #GPRS 150 #SKTD 140 (DNS resolution + timeout set with AT#SKTCT) #QDNS 170 Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 14 of 103

15 Command Time-Out (Seconds) #FTPOPEN 120 (timeout set with AT#FTPTO, in case no response is received from server) #FTPCLOSE 500 (timeout set with AT#FTPTO, in case no response is received from server) #FTPTYPE 500 (timeout set with AT#FTPTO, in case no response is received from server) #FTPDELE 500 (timeout set with AT#FTPTO, in case no response is received from server) #FTPPWD 500 (timeout set with AT#FTPTO, in case no response is received from server) #FTPCWD 500 (timeout set with AT#FTPTO, in case no response is received from server) #FTPLIST 500 (timeout set with AT#FTPTO, in case no response is received from server) + time to get listing #FTPPUT 500 (timeout set with AT#FTPTO, in case no response is received from server) #SGACT 150 #SH 10 #SD 140 (DNS resolution + connection timeout set with AT#SCFG) #CSURV 125 #CSURVC 125 #CSURVUC 125 #CSURVB 125 #CSURVBC 125 #CSURVP 125 #CSURVPC Turning ON/OFF the UE910 V2 FAMILY Please refer to UE910 V2 FAMILY Hardware User Guide 4.4. Checking WCDMA Device Functionality Baudrate After a proper power on, the device is ready to receive AT s on the USB or serial port. Several things must be checked in order to be sure that the device is ready to send and receive calls and SMS. UE910 V2 FAMILY does not support autobauding. Users have to set the right speed for serial communication before device initialization. If UE910 V2 FAMILY set the right speed, the device responds with. The default baudrate is send AT+IPR=<rate><cr> Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 15 of 103

16 wait for response UE910 Family Software User Guide where rate is the port speed and can be 0, 300,600,1200,2400,4800,9600,19200,38400,57600,115200, , , , , bps. NOTE: The USB or serial port suggested setting is: port speed , character format 8N1 (8 bit per char, No parity bit, and 1 stop bit) SIM Presence Checking The first thing to check is the SIM presence and PIN code insertion. This can be done with the following s: Enable the Extended Error Result Codes send AT+CMEE=1<cr> wait for response or if you prefer the verbose format instead of the numerical format then: send AT+CMEE=2<cr> wait for response Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 16 of 103

17 Query SIM Presence and Status send AT+CPIN?<cr> wait for response: Response Reason Action +CPIN: SIM PIN SIM is present and PIN is required to continue Proceed to par operations +CPIN: SIM PUK SIM is present and 10 attempts to give SIM PIN have failed, so SIM is blocked Send AT+CPIN=<SIM PUK> +CPIN: SIM PIN2 SIM is present and 3 attempts to give SIM Proceed to par PIN2 have failed, so SIM PUK2 is required +CPIN: SIM PUK2 SIM is present and 10 attempts to give SIM PUK2 have failed, so SIM PIN2 cannot use Send AT+CPIN=<SIM PUK> anymore. +CPIN: READY SIM is present and no PIN code is required to Proceed ahead proceed +CME ERROR: 10 SIM is not inserted Insert SIM or require SIM insertion and repeat from par CME ERROR: 13 SIM is failure Check SIM insertion or require a new SIM not defected and repeat from par CME ERROR: 14 SIM is busy retry later +CME ERROR: 15 SIM is wrong type Check SIM, it must be a GSM SIM or UMTS SIM(USIM). +CME ERROR: 770 SIM is permanent blocked Change valid SIM card Provide SIM PIN (only if required see point ) send AT+CPIN=****<cr> where **** stands for the SIM PIN code (e.g. 1234) wait for response: Response Reason Action SIM PIN was correct Proceed ahead ERROR the PIN code inserted is not correct Retry from par NOTE: When receiving the ERROR message, repeat Query SIM presence and status since after 3 failed attempts SIM PIN is not requested anymore, but SIM PUK is requested instead. You may need to go through procedure Provide SIM PUK (only if required see par ) send AT+CPIN=*******,<newpin><cr> where ******* stands for the SIM PUK code (e.g ) and <newpin> (e.g. 1234) will replace the old pin in the SIM. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 17 of 103

18 wait for response: UE910 Family Software User Guide Response Reason Action SIM PUK was correct Proceed ahead ERROR the SIM PUK code inserted is not correct Retry from par NOTE: When receiving the ERROR message, be careful to check if the SIM PUK is correct before trying again. After 10 failed attempts to provide the SIM PUK the SIM Card will lock and will not be usable anymore Network Checking Query Network Status send AT+CREG?<cr> wait for response: Response Reason Action +CME ERROR: 10 SIM not present or damaged Check SIM or require SIM insertion and repeat from par CME ERROR: 11 SIM is present and PIN is required to Repeat par CREG: 0,0 or +CREG: 1,0 +CREG: 0,1 or +CREG: 1,1 +CREG: 0,2 or +CREG: 1,2 +CREG: 0,3 or +CREG: 1,3 +CREG: 0,4 or +CREG: 1,4 +CREG: 0,5 or +CREG: 1,5 NOTE: continue operations No network is found Mobile is registered on its home network. Mobile is currently not registered on any network but is looking for a suitable one to register. Mobile has found some networks but it is not allowed to register on any of them, no roaming was allowed. Mobile is in an unknown network status Mobile has found some networks and is currently registered in roaming on one of them Check for antenna cable connection (antenna may be disconnected or damaged) or change position if the antenna is. Repeat par until a network is found. Proceed ahead. Ready to call Repeat procedure at par to see if it has found a suitable network to register in. Try in another place, and repeat procedure at par Repeat procedure at par to see if it has found a suitable network to register in Proceed ahead. Ready to call Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 18 of 103

19 When a response +CREG: x,1 or +CREG: x,5 is received, then the device is ready to place and receive a call or SMS. It is possible to jump directly to call setup procedures or SMS sending procedures Network Operator Identification Once the mobile has registered on some network (or even if it has returned +CREG:x,3), it is possible to query the mobile for network identifications, codes and names: send AT+COPS=?<cr> wait for response in the format: +COPS: : [list of supported (<stat>,long alphanumeric <oper>,short alphanumeric <oper>,numeric <oper>,< AcT>)s] [,,(list of supported <mode>s),(list of supported <format>s)] <stat> - operator availability 0 - unknown 1 - available 2 - current 3 - forbidden <AcT> access technology selected: 0 GSM 2 UTRAN NOTE: Since with this a network scan is done, this may require some seconds before the output is given. For example: Command: AT+COPS=?<cr> Answer: +COPS: (2,"I WIND","WIND","22288",2),(1,"SI MOBITEL GSM","","29341",0),(1,"Vodafone IT","OMNITEL","22210",2), (3,"I TIM","TIM","22201",0),,(0-4),(0-2) In this case the mobile is registered on the network "I WIND" which is a network from Italy, code: 222 and Network ID: 88. There is also another network available for registration: "SI MOBITEL GSM" which is a network from Slovenia, code: 293 and Network ID: 41, "SI.MOBIL" which is a network from Slovenia, code: 293 and Network ID: 40 and Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 19 of 103

20 Vodafone IT from Italy with Nation code 22 and Network 10. The other network is not available for registration: NOTE: UE910 Family Software User Guide This issues a network request and it may require quite a long time to respond, since the device has to wait the answer from the network (it can be as long as 60 seconds). Do not use this if not necessary. "I TIM" from Italy, code: 222 and Network ID: 01 FORBIDDEN NOTE: In this case an "I TIM" logo might be reproduced on the MMI to give the user the information that is registered on that network Check for Received Signal Strength & Quality Once the mobile has registered on one network, it may be useful to know the received signal strength & quality to give the user an indication of the reliability of the network. send AT+CSQ<cr> wait for response in the format: <WCDMA network > +CSQ: <rssi>,99 <GSM network> +CSQ: <rssi>,<ber> <rssi> is an integer from 0 to 99 that indicates the received signal strength: <rssi> value Signal Strength Indication dbm or less Signal is VERY low: at the extreme sensibility limit dbm MMI may indicate only 1 antenna bar dbm MMI may indicate only 1 antenna bar dbm MMI may indicate only 1 antenna bar dbm MMI may indicate only 1 antenna bar dbm MMI may indicate only 1 antenna bar dbm MMI may indicate 2 antenna bars 7-99 dbm MMI may indicate 2 antenna bars 8-97 dbm MMI may indicate 2 antenna bars 9-95 dbm MMI may indicate 2 antenna bars dbm MMI may indicate 3 antenna bars dbm MMI may indicate 3 antenna bars dbm MMI may indicate 3 antenna bars Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 20 of 103

21 13-87 dbm MMI may indicate 3 antenna bars dbm MMI may indicate 3 antenna bars dbm MMI may indicate 4 antenna bars dbm MMI may indicate 4 antenna bars dbm MMI may indicate 4 antenna bars dbm MMI may indicate 4 antenna bars dbm MMI may indicate 4 antenna bars dbm MMI may indicate 4 antenna bars dbm MMI may indicate 4 antenna bars dbm MMI may indicate 4 antenna bars dbm MMI may indicate 4 antenna bars dbm MMI may indicate 4 antenna bars dbm MMI may indicate 4 antenna bars dbm MMI may indicate 4 antenna bars dbm MMI may indicate 4 antenna bars dbm MMI may indicate 4 antenna bars dbm MMI may indicate 4 antenna bars dbm MMI may indicate 4 antenna bars dbm or more MMI may indicate 4 antenna bars 99 not detected MMI may indicate flashing antenna bars NOTE: When <rssi> is less than 6, with only 1 MMI antenna bar, the quality of a call will be poor and the call may even drop. <ber> is an integer from 0 to 7 and 99 that reports the received signal quality measured on the radio traffic channel. NOTE: The quality is measured on the traffic channel. It is available only during a conversation. In Idle the reported value must not be considered. In conversation the quality decreases with the increase of the <ber> number. The <ber> value refers strictly to the GSM radio channel and is a very technical parameter. It can be used to monitor the voice call quality since the voice quality is inversely proportional to the <ber> number. UE910 V2 FAMILY doesn t support ber in WCDMA network so the return value fixed as Quick Network Status Checking Once the mobile has registered on one network, it may be useful to know the received signal strength and the network on which the mobile is registered. These information can be gathered with the s +CREG, +COPS and +CSQ, which are part of the standard 3gpp GSM 07.07/ s as seen before, unfortunately these s are not so fast in the response due to network response time, especially the +COPS. If You want to keep your software as general as possible you can follow the indications given before and forget this part; instead if you need or want a faster way to check at the mobile network Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 21 of 103

22 information, the UE910 V2 FAMILY provides a special #MONI which can be used to gather all the information needed in a faster and simpler way: send AT#MONI=0<cr> wait for response send AT#MONI?<cr> wait for response in the format: When extracting data for the serving cell and the network name is known the format is: (GSM network) #MONI: <netname> BSIC:<bsic> RxQual:<qual> LAC:<lac> Id:<id> ARFCN:<arfcn> PWR:<dBm> dbm TA: <timadv> (WCDMA network) #MONI: <netmame> PSC:<psc> RSCP:<rscp> LAC:<lac> Id:<id> EcIo:<ecio> UARFCN:<uarfcn> PWR:<dBm> dbm DRX:<drx> SCR:<scr> When the network name is unknown, the format is: (GSM network) #MONI: Cc:<cc> Nc:<nc> BSIC:<bsic> RxQual:<qual> LAC:<lac> Id:<id> ARFCN:<arfcn> PWR:<dBm> dbm TA: <timadv> (WCDMA network) #MONI: Cc:<cc> Nc:<nc> PSC:<psc> RSCP:<rscp> LAC:,<lac> Id:<id> EcIo:<ecio> UARFCN:<uarfcn> PWR:<dBm> dbm DRX:<drx> SCR:<scr> When extracting data for an adjacent cell, the format is: (GSM network) #MONI: Adj Cell<n> [LAC:<lac> Id:<id>] ARFCN:<arfcn> PWR:<dBm> dbm (WCDMA network) #MONI: PSC:<psc> RSCP:<rscp> EcIo:<ecio> UARFCN:<uarfcn> SCR:<scr> Where: <netname> - name of network operator <cc> - country code <nc> - network operator code <n> - progressive number of adjacent cell <bsic> - base station identification code <qual> - quality of reception 0..7 <lac> - localization area code <id> - cell identifier Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 22 of 103

23 <arfcn> - assigned radio channel <dbm> - received signal strength in dbm <timadv> - timing advance <psc> - primary synchronisation code <rscp> - Received Signal Code Power in dbm <ecio> - chip energy per total wideband power in dbm <uarfcn> - UMTS assigned radio channel <drx> - Discontinuous reception cycle length <scr> - Scrambling code NOTE: TA: <timadv> is reported only for the serving cell. When the last setting done is AT#MONI=7, then the Read reports the above pieces of information for each of the cells in the neighbor of the serving cell, formatting them in a sequence of <CR><LF>-terminated strings. Currently this is available in case of GSM network. For example (WCDMA): at#moni=0<cr> At#moni<cr> #MONI: Welcome to KTF PSC:270 RSCP:-76 LAC:5121 EcIo:-3.5 UARFCN:10812 PWR:-73 dbm DRX:64 at#moni=1<cr> at#moni<cr> #MONI: Sync NSet PSC:408 RSCP:-86 EcIo:-13.5 UARFCN:10812 #MONI: Sync NSet PSC:102 RSCP:-104 EcIo:-31.5 UARFCN:10812 In this case the mobile is registered on the network whose Country code is 010 and Network operator code is 03, the signal strength is -83dBm (MMI may indicate 4 antenna bars as reported on the table 5). Other information received is strictly technical and must not be given to the user. The values reported are random and have no meaning. They are used only to explain usage. NOTE: Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 23 of 103

24 This must be used only to gather information on network name and signal strength, to check if mobile is registered or is looking for a suitable network to register. Always use the +CREG. This is due to the fact that if the network signal is too weak and mobile loses the registration. Until a new network is found the #MONI reports the last measured valid values and not the real ones. The TA (timing advance parameter) is valid only during a call. To properly use this feature, check network registration with +CREG as seen on par and when mobile is registered query the mobile for network operator name and signal strength with #MONI Placing a Voice call Before a voice call can be placed, it is recommended to check if the mobile is registered on a network (see par ) and if the signal strength is enough to ensure a call can be made Voice Call Device Setup Set the Device in Voice Mode send AT+FCLASS=8<cr> wait for response NOTE: This may be omitted if the modifier ";" is added at the end of the ATD after the dialed number Set the Desired Audio Path Active The UE910 V2 FAMILY provides two analog audio paths(hs and HF). There are two modes to switch between these two audio paths: SOFTWARE: by using the AT#CAP= <n> (with n=1 OR n=2) HARDWARE: by setting AT#CAP=0 and setting the AXE input high or low. If only one path is needed, then it is preferable to use HS. NOTE: When Hardware control is not needed, AXE pin can be left unconnected. The audio paths can also be switched in both ways during a call. Use the following AT s to switch between the audio paths(when the used module provides two physical audio paths). send AT+CAP=<n><cr> wait for response Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 24 of 103

25 Examples 1: AT#CAP=2 Use software mode to select HS audio path Examples 2: AT#CAP=1 Use software mode to select HF audio path Examples 3: AT#CAP=0 Use hardware mode to select audio path After entering the previous, select the audio path by means of the pin AXE: pin AXE = HIGH to select HS audio path pin AXE = LOW to select HF audio path NOTE: Though changing the audio path, Only headset audio path(hs) becomes ACTIVE Set Volume on Speaker Use the following AT to set up the output volume level on the active audio path: send AT+CLVL=<vol><cr> wait for response Where: <vol> is a number between 0 and 14 representing the volume setting: 0 - minimum volume 14 - maximum volume Set Microphone Mute The microphone of the active path can be muted with an AT : send AT+CMUT=1<cr> wait for response Check the microphone mute setting: send AT+CMUT?<cr> wait for response in the format: Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 25 of 103

26 NOTE: +CMUT: <mute> UE910 Family Software User Guide The mute setting is different from Volume setting: it refers to both the audio paths, the mute setting will remain even when changing audio path Phone Number Dialing Dial a Given Phone Number Send ATD <PhoneNumber><cr> <PhoneNumber> is the phone number to be dialed wait for response: Response Reason Action The call has been placed Wait for the other party to lift the receiver BUSY The line called is busy retry later NO ANSWER The receiver did not answer the call retry later NO CARRIER Call placing has not been check for mobile registration and successful signal strength For example: 1- Let us assume you have to call the national number , ATD <cr> response 2- Let us assume you have to call the national number but in international format , ATD <cr> response 3- Let us assume you have to call the international number without previously setting the +FCLASS=8 (voice), ATD ;<cr> Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 26 of 103

27 response Closing the Voice Call Hang up the Voice Call NOTE: send AT+CHUP<cr> wait for response During the voice call the device remains in mode, so the escape sequence (+++) must not be issued before sending s Placing a Circuit Switched Data (CSD) call Before a data call can be placed, it is recommended to check if the mobile is registered on a network (see par ) and if the signal strength is enough to ensure that a call can be made CSD Call Device Setup Set the Device in Data Mode NOTE: send AT+FCLASS=0<cr> wait for response The +FCLASS setting is maintained in the memory and there is no need to repeat this if +FCLASS setting is not changed Set the Desired Modulation and Speed for the Connection The data connection can be made using different modulations at different speeds. This connection mode can be selected with the +CBST. The syntax for the is: AT+CBST=<mod>,0,<ce> These parameters can be selected as seen in the table: <WCDMA network> Command Modulation Speed Connection Element [bps] AT+CBST=0,0,1 V non transparent AT+CBST=14,0,1 V non transparent AT+CBST=16,0,1 V non transparent Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 27 of 103

28 AT+CBST=17,0,1 V non transparent AT+CBST=43,0,1 V non transparent AT+CBST=48,0,1 V non transparent AT+CBST=51,0,1 V non transparent AT+CBST=75,0,1 V.110/ X non transparent AT+CBST=80,0,1 V.110 / X non transparent AT+CBST=81,0,1 V.110 / X non transparent AT+CBST=83,0,1 V.110/ X non transparent AT+CBST=83,4,1 V.110/ X RDI non transparent AT+CBST=84,0,1 X non transparent AT+CBST=116,1,0 Bit transparent transparent AT+CBST=134,1,0 multimedia transparent <GSM network> Command Modulation Speed Connection Element [bps] AT+CBST=0,0,1 V non transparent AT+CBST=7,0,1 V non transparent AT+CBST=12,0,1 V non transparent AT+CBST=14,0,1 V non transparent AT+CBST=39,0,1 V non transparent AT+CBST=43,0,1 V non transparent AT+CBST=71,0,1 V110/ X non transparent AT+CBST=75,0,1 V.110/ X non transparent AT+CBST=7,0,0 V transparent AT+CBST=12,0,0 V transparent AT+CBST=14,0,0 V transparent Once selected the appropriate <mod > and <ce> parameters from the table: send AT+CBST=<mod>,0,<ce><cr> wait for response Phone number dialing (data call) Dial a Given Phone Number send ATD <PhoneNumber><cr> <PhoneNumber> is the phone number to be dialed wait for response: Response Reason Action CONNECT 9600 The called modem is now on line. exchange data BUSY The line called is busy retry later NO ANSWER The receiver did not answer the call retry later NO CARRIER The modem handshaking has not been Check for mobile registration and Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 28 of 103

29 successful signal strength and eventually retry. NOTE: The response to the ATD is returned after the modem handshaking, this takes about 30 seconds, so allow this time before doing anything. When the device is doing the handshake the issue of any character closing the handshake aborts the call. For example: 1- Let us assume you have to call the national number , ATD <cr> response CONNECT Let us assume you have to call the national number but in international format , ATD <cr> response CONNECT Let us assume you have to call the international number , ATD <cr> response CONNECT Closing the Data call Exit the data mode and enter the mode Hang up the data call NOTE: send escape sequence +++ wait for response send ATH<cr> wait for response NO CARRIER Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 29 of 103

30 During the data call the device remains in data (on line) mode, so the escape sequence (+++) must be issued before sending AT s to the device Answer an incoming Call When an incoming call is detected, the device reports an unsolicited code, which may be: Unsolicited code RING +CRING: VOICE +CRING: ASYNC +CRING: REL ASYNC +CRING: SYNC +CRING: REL SYNC +CRING: FAX To answer the call: Reason The extended format of incoming call indication is disabled and a call (voice or data) is incoming. The extended format of incoming call indication is enabled and a voice call is incoming. The extended format of incoming call indication is enabled and an asynchronous transparent data call is incoming. The extended format of incoming call indication is enabled and an asynchronous reliable (not transparent) data call is incoming. The extended format of incoming call indication is enabled and a synchronous transparent data call is incoming. The extended format of incoming call indication is enabled and a synchronous reliable (not transparent) data call is incoming. The extended format of incoming call indication is enabled and a fax call is incoming. send ATA<cr> wait for response: Response Reason Action CONNECT 9600 The incoming call was a DATA one and called modem is now on exchange data line. ERROR No incoming call is found, call may have been lost call lost NO CARRIER The incoming call was a DATA one and the modem handshaking has not been successful NOTE: The incoming call was a VOICE call and is now active. check for mobile registration and signal strength and modem settings. proceed ahead The call is answered with the appropriate type (VOICE or DATA) regardless of the +FCLASS active setting. To distinguish between Data and Voice see the response or the extended format incoming call indication Data Flow Control The Telit UE910 V2 FAMILY provides the flow control method to avoid the unexpected data loss, while data communication is activating via serial interface such as UART,USB. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 30 of 103

31 Below table describes the flow control method can be selected in serial interface SW Flow control (Xon/Xoff) HW Flow control (RTS/CTS) No Flow control Remark UART1 O O O Flow control method can be set by AT\Q, AT&K, AT+IFC USB MDM O Only support for RTS/CTS USB AUX O No support flow control NOTE: USB AUX doesn t support any flow control method. Therefore, this port isn t suitable for DATA service port. We recommend this port should be used only for AT and URC processing In case TE sends RTS signal or XOff to Modem to stop data flow from Modem, Modem s transmission can t be stopped, instantly. There are some delay times Modem process RTS signal. Therefore, TE should prepare the guarding buffer after sending RTS signal or XOff to Modem to control data flow. Below table describes the size of guarding buffer, according to serial interface and air access technology, approximately GSM/WCDMA GPRS/EGPRS/WCDMA HSDPA Circuit Service Packet Service UART1 1 Kbyte 1.5 Kbyte 1.5 Kbyte USB MDM 1 Kbyte 1.5 Kbyte 4 Kbyte TE should prepare the guarding buffer more than the recommended buffer size to guarantee their data transmission without the loss of data Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 31 of 103

32 5. Advanced Operations 5.1. Accessing the Phonebook The UE910 V2 FAMILY can access the phonebook storage of the SIM card inserted, by using specific AT s it is possible to store and recall phone numbers and their associated name Preliminary Phonebook Setup The UE910 V2 FAMILY supports several SIM phonebook storages: DC - MT dialed calls list EN - SIM/USIM (or MT) emergency number (+CPBW is not applicable for this storage) "FD" - SIM/USIM fixed dialing-phonebook. If a SIM card is present or if a UICC with an active GSM application is present, the information in EF FDN under EF Telecom is selected. If a UICC with an active USIM application is present, the information in EF FDN under ADF USIM is selected. "LD" - SIM/UICC last-dialing-phonebook "MC" - MT missed(unanswered received) calls list (+CPBF/+CPBW may not be applicable for the storage) ME - MT phonebook ME - MT phonebook ON - SIM(or MT) own numbers (MSISDNs) list (reading of this storage may be available through +CNUM also). When storage information in the SIM/UICC, if a SIM card is present or if a UICC with an active USIM application is present, the information in EF MSISDN under DF Telecom is selected. If a UICC with an active USIM application is present, the information in EF MSISDN under ADF USIM is selected. "RC" - MT received-calls-list (+CPBF are not applicable for this storage) "MC" - device missed (unanswered received) calls list (+CPBF is not applicable for this storage) MB - mailbox numbers stored on SIM; it is possible to select this storage only if the mailbox service is provided by the SIM (see #MBN). This is the list of the received calls calling numbers, it is updated automatically at each call received and insertion or search on it is not possible. The only operations allowed are recall, read and delete. SM - SIM/UICC phonebook. If a SIM card is present or if a UICC with an active GSM application is present, EF ADN under DF Telecom is selected. If a UICC with active USIM application is present, the global phonebook, DF PHONEBO under DF Telecom is selected. In order to access the storage, you have to choose which one will be active. This must be always the first PB operation. Once the storage is selected, it is not needed anymore to select it again until the desired storage remains the one active and the device is not turned off. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 32 of 103

33 Selecting PB Storage Active send AT+CPBS=<storage>[<,passwrod>]<cr> <storage> is the desired PB storage: DC - MT dialed calls list UE910 Family Software User Guide EN - SIM/USIM (or MT) emergency number (+CPBW is not applicable for this storage) FD - SIM/USIM fixed dialing phonebook LD - SIM/USIM last dialing phonebook (+CPBF/+CPBW is not applicable for this storage) MC - missed calls list (+CPBF is not applicable for this storage) MB - mailbox numbers stored on SIM ME - MT phonebook ON - SIM (or MT) own numbers (MSI storage may be available through +CNUM also). RC - received calls list (+CPBF is not applicable for this storage) SM - SIM/USIM phonebook <password>: string type value representing the PIN2-code required when selecting PIN2- code locked <storage>s above, e.g. "FD" or the hidden key to be verified in order to access to the hidden phonebook entries in the SIM/USIM or any other phonebook with hidden entries. wait for response: Response Reason Action selected PB is now active Proceed ahead ERROR some error occurred Enable extended result codes (see par ) and retry. +CME ERROR: 10 SIM not present Check SIM or require SIM insertion and repeat from par CME ERROR: 11 SIM is present and PIN is required Insert SIM PIN (see par ) to continue operations +CME ERROR: 12 SIM is present and PUK is Insert SIM PUK (see par ) required to continue operations +CME ERROR: 13 SIM defect Check SIM insertion or require a new SIM not defected and repeat from par CME ERROR: 14 SIM is busy retry later +CME ERROR: 15 SIM is wrong type Check SIM, it must be a GSM SIM or UMTS SIM(USIM). +CME ERROR: 17 PIN2 is required to continue operations, since FD facility is not enabled. Enable FD facility with +CLCK (see par ) and retry. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 33 of 103

34 NOTE: After power up & PIN authentication the device reads all the SIM for a backup, hence SIM access is inhibited (SIM is busy after the issue of the PIN or after power up if PIN request is disabled) for a time varying from few seconds to about a minute, depending on the percentage of written records in the SIM phonebook. If Phonebook s are issued during this time the device returns an error message. If this happens, the operations will start again later. Due to the particular features of the FD storage, when selecting the FD storage the PIN2 must be inserted or the FD facility must be enabled. If +CPBS reports +CME ERROR: 17 then enable the facility with +CLCK (see par ) For example: 1- Let us assume you want to select the "SM" normal phonebook for operations, AT+CPBS="SM"<cr> response 2- Let us assume you want to select the "MC" missed calls list for operations, AT+CPBS="MC"<cr> response 3. Let us assume you want to select the FD fixed dialing phonebook for operations AT+CPBS="FD", 0000 <cr> response Enable Fixed Dialing Phonebook Facility (only for FD PB) send AT+CLCK=FD,1,<PIN2><cr> <PIN2> is the PIN2 code of the SIM. wait for response: Response Reason Action FD facility is now enabled Return to select PB (see par ) ERROR some error occurred Enable extended result codes (see Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 34 of 103

35 par ), check if the PIN2 is correct and retry. +CME ERROR: 17 the inserted PIN2 is wrong Check PIN2 code and retry. NOTE: When receiving the ERROR or +CME ERROR message, repeat Query SIM presence and status since after 3 failed attempts SIM PIN2 is not requested anymore, SIM PUK2 is requested instead. You may need to go through procedure (but insert PUK2 instead of PUK1) Phonebook Entry Search by Name First, you must select the "SM" storage as active (see par ). send AT+CPBF=<text><cr> <text> is the desired string to be found in the name field of the PB record. wait for response in the format: +CPBF= <index>,"<number>",<type>,"<text>" <index> is the record number on the PB; <Number> is the phone number; <type> is the type of number: international numbering scheme national numbering scheme <text> is the alphanumeric name associated with the number or in the case no corresponding entries are found: +CME ERROR: 22 or simply ERROR. NOTE: The search for <text> string is not case sensitive and the string may or may not be included in double brackets Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 35 of 103

36 For example: 1- Let us assume you want to select the "SM" normal phonebook for operations, AT+CPBS="SM"<cr> response Now you might want to look for the entries with the name starting with: "FA" AT+CPBF="FA"<cr> the response may look like: +CPBF= 7," ",145,"Fabio" +CPBF= 9," ",129,"Fabrizio" Now you might want to look for the entries with the name starting with: "FAUSTO" but no record contains this name: AT+CPBF="FAUSTO"<cr> response +CME ERROR: 22 or if extended error codes are disabled simply response ERROR Phonebook Entry Read by Index First, you must select the desired storage as active (see par ). Then: send AT+CPBR=<index>[,<index2>]<cr> <index> is the index number of the desired PB record to be read. wait for response in the format: +CPBR= <index>,"<number>",<type>,"<text>" <index> is the record number on the PB; Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 36 of 103

37 <Number> is the phone number; <type> is the type of number: international numbering scheme national numbering scheme <text> is the alphanumeric name associated with the number or in the case the index number does not correspond to a written record: +CME ERROR: 22 or simply ERROR. For example: 1- Let us assume you want to select the "SM" normal phonebook for operations, AT+CPBS="SM"<cr> response Now you might want to look for the entry at the position index = 7 AT+CPBR=7<cr> the response may look like +CPBR= 7," ",145,"Fabio" Now you might want to look for the entries at the positions from 7 to 9 and for example the position at index 8 is empty AT+CPBR=7,9<cr> the response may look like +CPBR= 7," ",145,"Fabio" +CPBR= 9," ",129,"Fabrizio" Phonebook Entry Write First you must select the desired storage as active (see par ). Then: send AT+CPBW=<index>,<number>,<type>,<text><cr> Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 37 of 103

38 <index> is the index number of the desired PB record to be written (may be omitted if any empty record number can be used). <Number> is the phone number; <type> is the type of number: international numbering scheme (contains the character "+") national numbering scheme <text> is the alphanumeric name associated with the number. wait for response: Response Reason Action Record has been successfully Proceed ahead written ERROR some error occurred Enable extended result codes (see par ), and retry. +CME ERROR: 10 SIM not present Check SIM or require SIM insertion and repeat from par CME ERROR: 11 SIM is present and PIN is required Insert SIM PIN (see par ) to continue operations +CME ERROR: 12 SIM is present and PUK is Insert SIM PUK (see par ) required to continue operations +CME ERROR: 13 SIM defect Check SIM insertion or require a new SIM not defected and repeat from par CME ERROR: 14 SIM is busy retry later +CME ERROR: 15 SIM is wrong type Check SIM, it must be a GSM SIM or UMTS SIM(USIM). +CME ERROR: 21 invalid index Change index number or leave it empty and retry. +CME ERROR: 20 memory full PB storage is full. For example: 1- Let us assume you want to select the "SM" normal phonebook for operations, AT+CPBS="SM"<cr> response Now you might want to write a new record on the PB: AT+CPBW=," ",129,"NewRecord"<cr> response Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 38 of 103

39 Now you may want to check if the operation has really succeeded and where the new record has been written (obviously the operation was successful, since the device returned ). AT+CPBF="NEW"<cr> response +CPBF= 8," ",129,"NewRecord" The new record was written at the position index 8. (The first free record index found) Phonebook Entry Delete First, the desired storage must be active (see par ). Then: send AT+CPBW=<index><cr> <index> is the index number of the desired PB record to be deleted. wait for response: Response Reason Action Record has been successfully proceed ahead deleted ERROR some error occurred Enable extended result codes (see par ), and retry. +CME ERROR: 21 invalid index, out of PB storage check index number and retry. limits +CME ERROR: 10 SIM not present Check SIM or require SIM insertion and repeat from par CME ERROR: 11 SIM is present and PIN is required insert SIM PIN (see par ) to continue operations +CME ERROR: 12 SIM is present and PUK is insert SIM PUK (see par ) required to continue operations +CME ERROR: 13 SIM defect Check SIM insertion or require a new SIM not defected and repeat from par CME ERROR: 14 SIM is busy retry later +CME ERROR: 15 SIM is wrong type Check SIM, it must be a GSM SIM or UMTS SIM(USIM). NOTE: The delete operation simply overwrites the record number <index> with an empty record. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 39 of 103

40 If the record to be deleted was already empty, no error messages will be shown, but it will be only filled again with empty values Phonebook Entry Dial You may want to dial a number previously stored in the phonebook. First, you must find the desired phone number index position, to do it use the +CPBF. Once the <index> number is known, set up the device for the type of call you want to dial. Then: send ATD> <index><cr> <index> is the index number of the desired PB record to be dialed. For example: wait for response according to the call type you issued. 1- Let us assume you want to make a Voice call on the internal audio path MT to "Fabio" whose number is stored on the SIM PB: - Select the PB as active storage AT+CPBS="SM"<cr> response Now find the index number where "Fabio" is recorded: AT+CPBF="Fabio"<cr> the response may look like +CPBF= 7," ",145,"Fabio" the first field is the index position: 7 in this case. Now set up Voice call: AT+FCLASS=8<cr> response: AT#CAP=2 <cr> AT+CLVL=8<cr> Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 40 of 103

41 AT+CMUT? <cr> +CMUT: 0 and dial ATD> 7<cr> 5.2. Distinguish Calls Identify the Call Type RING The UE910 V2 FAMILY is able to identify the call type before answering it. It is possible to have different ring indications (unsolicited codes) depending on the call type: Unsolicited code +CRING: VOICE +CRING: ASYNC +CRING: SYNC +CRING: REL ASYNC +CRING: REL SYNC +CRING: FAX Reason The extended format of incoming call indication is disabled and a call (voice or data) is incoming. The extended format of incoming call indication is enabled and a voice call is incoming. The extended format of incoming call indication is enabled and an asynchronous transparent data call is incoming. The extended format of incoming call indication is enabled and a synchronous transparent data call is incoming. The extended format of incoming call indication is enabled and an asynchronous not transparent data call is incoming. The extended format of incoming call indication is enabled and a synchronous not transparent data call is incoming. The extended format of incoming call indication is enabled and a fax call is incoming. In order to use this feature you must enable the extended format of incoming calls Set the Extended Incoming Call Indication send AT+CRC=<n><cr> <n> is the operation mode selected: 0 - extended results Disabled (device reports RING only) 1 - extended results Enabled (device reports +CRING: <type> indication) Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 41 of 103

42 wait for response Identify the Caller The UE910 V2 FAMILY is able to identify the caller number and give indication of it before the call is answered. The calling number is presented after each RING or +CRING indication in the format: +CLIP: "<number>",<type>[,"<subaddress>",<satype>[,"<alpha>"[,<cli validity>]]] <Number> is the phone number; <type> is the type of number: international numbering scheme national numbering scheme <subaddress> is the subaddress of the calling party <satype> is the type of subaddress <alpha> is an optional string type alphanumeric representation of <number> corresponding to the entry found in phonebook; <CLI validity> is the validity status of CLI presentation: 0 CLI valid. 1 CLI has been withheld by the originator. 2 CLI is not available due to interworking problems or limitation or originating network. In order to use this feature you must enable the caller ID indication presentation, if feature is disabled then no CLI indication is given after the RING or +CRING code Set Caller line ID Indication Presentation send AT+CLIP=<n><cr> <n> is the operation mode selected: 0 - Calling Line Indication Presentation Disabled 1 - Calling Line Indication Presentation Enabled For example: wait for response 1- Let us assume you receive a call from the national number and extended incoming calls indication is disabled while CLIP is enabled, you can see: ring indication: RING Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 42 of 103

43 +CLIP: " ", Let us assume you receive a call from the international number and extended incoming calls indication is disabled while CLIP is enabled, you can see: ring indication: RING +CLIP: " ", 145 NOTE: This does not mean that the incoming call is an international one, it simply means that the numbering scheme used to identify the caller is international Restricting Calling Line Indication The UE910 V2 FAMILY is able to send the calling line indication (CLI) to the other party through the network when an outgoing call is made. This indication can be restricted (CLIR) in various ways: CLI sent always CLI never sent CLI temporary sent (normally not sent) CLI temporary not sent (normally sent) CLIR Service Status Query send AT+CLIR?<cr> wait for response in the format: +CLIR: <n>,<m> <n> is the facility status on the Mobile 0 - CLIR facility according to CLIR service network status 1 - CLIR facility active (CLI not sent) 2 - CLIR facility not active (CLI sent) <m> is the facility status on the Network 0 - CLIR service not provisioned (service unavailable) 1 - CLIR service provisioned (service available) 2 - unknown (e.g. no network present, etc.) 3 - CLI temporary mode presentation restricted 4 - CLI temporary mode presentation allowed NOTE: Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 43 of 103

44 The <m> parameter reports the status of the service at network level. UE910 Family Software User Guide If the CLIR service is not provisioned, then it is not possible to use this service and changing the first parameter <n> will not change the CLI presentation to the other party behavior of the network. For example: 1- Let us assume you want to check your CLIR settings: AT+CLIR? <cr> response +CLIR: 2,4 In this case the CLIR service is temporary mode allowed on the network and the mobile sends the CLI when calling. (CLI Restriction not active) Restrict/Allow Caller Line ID Indication send AT+CLIR=<n><cr> <n> is the operation mode selected: 0 - Calling Line Indication to the other party According to Network service status. 1 - Calling Line Indication Restriction Enabled (CLI not sent) 2 - Calling Line Indication Restriction Disabled (CLI sent) For example: wait for response 1- Let us assume you want to disable the CLI presentation to the other party permanently: AT+CLIR=1<cr> response: Call Barring Control Call barring is a GSM/WCDMA service that allows the user to block certain types of calls: barring all outgoing calls barring outgoing International calls barring outgoing International calls except to home country barring all incoming calls Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 44 of 103

45 barring incoming calls when roaming outside the home country all barring services (applicable only for disabling ) UE910 Family Software User Guide all outgoing barring services (applicable only for disabling ) all incoming barring services (applicable only for disabling ) The service can be queried, enabled and disabled. NOTE: The call barring service is handled by the network, hence all the relative s issue a network request and it may take several seconds to get response from the network. Furthermore, all call barring service s must be issued when the mobile is registered on some Network; otherwise an error code is returned (no network service) Call Barring Service Status Query send AT+CLCK=<fac>,2<cr> <fac> is the facility to be queried: AO - Barring All Outgoing Calls OI - Barring Outgoing International Calls OX - Barring Outgoing International Calls except to Home Country AI - Barring All Incoming Calls IR - Barring Incoming Calls when Roaming outside the home country AB - All barring services (applicable only for disabling ) AG - All outgoing barring services (applicable only for disabling ) AC - All Incoming barring services (applicable only for disabling ) PP - service Provider Personalization (refer 3GPP TS [33]) PC - Corporate Personalization (refer 3GPP TS [33]) PF - lock Phone to the very First inserted SIM/UICC card (also referred in the present document as PH-FSIM) (MT asks password when other than the first SIM/UICC card is inserted) wait for response: Response Reason Action +CLCK: 0 facility is disabled calls are allowed +CLCK: 1 facility is enabled calls are barred +CME ERROR: 4 operation not supported, the service required is not available Check syntax and service code +CME ERROR: 30 no network service Check for registration (see par ) and signal strength. NOTE: Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 45 of 103

46 The call barring service is handled by the network, hence all the relative s issue a network request and it may take several seconds to have the response from the network. Furthermore all the Barring service s must be issued when the mobile is registered on some network, else an error code is returned (no network service ). For example: 1- Let us assume you want to check whether the incoming calls when roaming outside Home Country are barred or not: AT+CLCK=IR,2<cr> response +CLCK: 0 In this case, the incoming (received) calls ARE NOT BARRED when in Roaming outside the Home Country. 2- Let us assume you want to check whether the Outgoing (originated) international calls are barred or not: AT+CLCK=OI,2<cr> response: +CLCK: 1 In this case, the outgoing international calls ARE BARRED Barring/Unbarring All Incoming Calls send AT+CLCK=AI,<en>,<pwd><cr> <en> is the operation selected: 0 - Call Barring Disable (Unbarring) 1 - Call Barring Enable (Barring) <pwd> is the network password required to change facility status wait for response: Response Reason Action Barring is now enabled/disabled all incoming calls will be barred/unbarred ERROR some error occurred Enable the extended error codes report (see par ) and retry. +CME ERROR: 4 operation not supported, the service required is not available Check syntax Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 46 of 103

47 +CME ERROR: 30 no network service Check for registration (see par ) and signal strength. +CME ERROR: 16 wrong network password check network password and retry For example: 1- Let us assume you want to bar all the incoming calls and the network password of your operator is 0000: AT+CLCK=AI,1,0000<cr> response Barring/Unbarring Incoming Calls When in International Roaming send AT+CLCK=IR,<en>,<pwd><cr> <en> is the operation selected: 0 - Call Barring Disable (Unbarring) 1 - Call Barring Enable (Barring) <pwd> is the network password required to change facility status wait for response: Response Reason Action Barring is now enabled/disabled all incoming calls when is international Roaming will be barred/unbarred ERROR some error occurred Enable the extended error codes report (see par ) and retry. +CME ERROR: 4 operation not supported, the Check syntax service required is not available +CME ERROR: 30 no network service Check for registration (see par ) and signal strength. +CME ERROR: 16 wrong network password check network password and retry For example: 1- Let us assume you want to bar all the incoming calls when the mobile is roaming outside its home country and the network password of your operator is 0000: AT+CLCK=IR,1,0000<cr> response Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 47 of 103

48 Barring/Unbarring All Outgoing Calls send AT+CLCK=AO,<en>,<pwd><cr> <en> is the operation selected: 0 - Call Barring Disable (Unbarring) 1 - Call Barring Enable (Barring) <pwd> is the network password required to change facility status UE910 Family Software User Guide wait for response: Response Reason Action Barring is now enabled/disabled all outgoing calls will be barred/unbarred ERROR some error occurred Enable the extended error codes report (see par ) and retry. +CME ERROR: 4 operation not supported, the Check syntax service required is not available +CME ERROR: 30 no network service Check for registration (see par ) and signal strength. +CME ERROR: 16 wrong network password check network password and retry For example: 1- Let us assume you want to bar all the outgoing calls (originated by mobile) and the network password of your operator is 0000: AT+CLCK=AO,1,0000<cr> response Barring/Unbarring All Outgoing International Calls send AT+CLCK=OI,<en>,<pwd><cr> <en> is the operation selected: 0 - Call Barring Disable (Unbarring) 1 - Call Barring Enable (Barring) <pwd> is the network password required to change facility status wait for response: Response Reason Action Barring is now enabled/disabled all outgoing international calls will be barred/unbarred Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 48 of 103

49 ERROR some error occurred Enable the extended error codes report (see par ) and retry. +CME ERROR: 4 operation not supported, the Check syntax service required is not available +CME ERROR: 30 no network service Check for registration (see par ) and signal strength. +CME ERROR: 16 wrong network password check network password and retry For example: 1- Let us assume you want to bar all the outgoing international calls (originated by mobile and to a number outside the home country of the mobile) and the network password of your operator is 1234: AT+CLCK=OI,1,1234<cr> response: Barring/Unbarring All Outgoing International Calls Except to Home Country send AT+CLCK=OX,<en>,<pwd><cr> <en> is the operation selected: 0 - Call Barring Disable (Unbarring) 1 - Call Barring Enable (Barring) <pwd> is the network password required to change facility status wait for response: Response Reason Action Barring is now enabled/disabled all outgoing international calls except to Home Country will be barred/unbarred ERROR some error occurred Enable the extended error codes report (see par ) and retry. +CME ERROR: 4 operation not supported, the Check syntax service required is not available +CME ERROR: 30 no network service Check for registration (see par ) and signal strength. +CME ERROR: 16 wrong network password check network password and retry For example: 1- Let us assume you want to bar all the outgoing international calls except the ones towards the Home Country and the network password of your operator is 1234: Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 49 of 103

50 AT+CLCK=OX,1,1234<cr> response: Unbarring all the Calls send AT+CLCK=AB,0,<pwd><cr> <pwd> is the network password required to change facility status wait for response: Response Reason Action Barring is now disabled all calls will be allowed (unbarred) ERROR some error occurred Enable the extended error codes report (see par ) and retry. +CME ERROR: 4 operation not supported, the Check syntax service required is not available +CME ERROR: 30 no network service Check for registration (see par ) and signal strength. +CME ERROR: 16 wrong network password check network password and retry For example: 1- Let us assume you want to disable all the barring services you might have previously activated and the network password of your operator is 0000: AT+CLCK=AB,0,0000<cr> response: 5.3. DTMF Tones DTMF tones are managed by specific AT s. These tones are generated with AT s only during voice calls. The minimum duration of a DTMF tone can be set on 10 ms but it must be considered that this value can vary with the limitations of the network. Group high Group low 1209 Hz 1336 Hz 1477 Hz 697 Hz Hz Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 50 of 103

51 852 Hz Hz * 0 # NOTE: The GSM/WCDMA system architecture defines that the audio signal of the DTMF tones is inserted by the network switches on s sent by the Mobile Station (MS). Thus, the default duration parameters may vary from network to network. In case that the devices are controlled by DTMF, they become sensitive related to the duration of the tones and timing of the sequences. Dedicated investigations on the parameter settings must be made GSM/WCDMA Power Saving Function The Telit UE910 V2 FAMILY has a special function that reduces power consumption during idle time, thus allowing a longer standby time with a given battery capacity. This function monitors the DTR line and USB VBUS line indicating that the OEM application is ready to send s when DTR goes high and USB VBUS goes low (0V on USB). If so, the OEM application is not going to send any s and the UE910 V2 FAMILY module can save energy by shutting down its internal serial port or USB port. When the OEM application becomes ready again, the line DTR is tied low (0V on UART) or VBUS is tied high; the UE910 V2 FAMILY detect this condition and powers up the serial port or USB port. If the power saving function is activated, then the serial port must support the DTR line since when this line is high (Data Terminal is NOT ready) and the USB port must support the VBUS line since when this line is Low the device goes into a sleep condition and will not respond to s until the DTR is tied low (Data Terminal is ready) or the VBUS is tied high Enabling/Disabling the Power Saving Function send AT+CFUN=<fun><cr> <fun> is the power saving function mode, the supported values are: 0 - minimum functionality, NON-CYCLIC SLEEP mode: in this mode, the AT interface is not accessible. 1 - mobile full functionality with power saving disabled (factory default) 2 - disable TX (not support) 4 - disable both TX and RX 5 - mobile full functionality with power saving enabled 9 - just as 0 but with different wake-up events (incoming data packet) wait for response: Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 51 of 103

52 Response Reason Action The power save is now active ERROR some error occurred Enable extended result codes (see par ), and retry. +CME ERROR: 4 operation not supported Check syntax and <fun> value Power Saving Mode Power Saving Mode means that Device is in sleep mode with disabling the interface (UART/USB). UE910 V2 FAMILY makes it possible for DTE to receive the event such as incoming call/sms/data while both DTE and Modem are in sleep mode with disabling all serial interfaces. DTE must require below specification to achieve the reduction of power consumption. DSR/DTR/RTS/CTS/RI Pin control on Main UART port. DSR/DTR/RTS/CTS Pin emulation on Telit USB Modem port. If DTE satisfies above requirement, UE910 V2 FAMILY can provide the functionalities: Keep URC message. Keep Incoming data during data mode, until DTE wake up from sleep mode. UE910 V2 FAMILY helps DTE to reduce their power consumption using below rules. Use RI on Main UART to wake up DTE from sleep mode. (DTE must always monitor RI pin during power saving mode). Use DTR on Main UART to place Modem in sleep mode or wake up Modem from sleep mode. NOTE: For 2-pin (RX/TX) UART user, use RTS on Main UART to control the flow from modem to DTE is optional (+IFC=2, 2 and #CFLO=1) Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 52 of 103

53 URC Message in Power Saving Figure 4.1 the flow chart for URC message in power saving mode Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 53 of 103

54 Above Figure 4.1 illustrates the action flow to get URC messages are invoked while both DTE and modem in sleep mode. UE910 V2 FAMILY offers below serial ports, which have their own the limitation for flow control methods. Table 4.1 the flow control capability for each serial interface Flow Control Method Hardware Flow Software Flow Main UART Support Not Support Telit USB Modem Support(only for data mode) Not Support Telit USB Auxiliary Not Support Not Support UE910 V2 FAMILY keeps the URC messages are listed in Table 4.1 and enabled by AT in power saving mode. Table 4.2 URC message List URC Message Enable/Disable AT Command RING Not Support, Always enabled NO CARRIER Not Support, Always enabled CONNECT Not Support, Always enabled +CIEV +CIND +CREG +CREG +CGREG +CGREG +CMTI,+CMT,+CBM,+CDS,+CDSI +CNMI +CCWA +CCWA #TEMPMEAS #TEMPMON #MWI #MWI #GSMAS #GSMAD +SRING Not Support, Always enabled +CRING +CRC +CLIP +CLIP +CUSD +CUSD +CCM +CAOC +CSSI,+CSSU +CSSN +CALA +CALA #QSS #QSS #ECAM #ECAM UE910 V2 FAMILY keeps the URC messages are listed in Table 4.1 and enabled by AT in power saving mode. Product UE910 V2 FAMILY Table VBUS Control System VBUS Master DTE ( must turn off VBUS when entering to sleep mode and turn on VBUS when waking up from sleep mode ) Note: DTE can get URC message using only Main UART in power saving mode. If Main UART is reserved for data communication, it s impossible to get URC messages are invoked during power saving mode. UE910 V2 FAMILY can t keep URC messages larger than 8K bytes, when hardware flow control is activated by RTS (AT#CFLO=1). We recommend that DTE get the URC message as soon as RI signal is guaranteed on Main UART. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 54 of 103

55 UE910 V2 FAMILY provides the option to allow DTE to enter sleep mode with the maintenance of data connection. Above Figure illustrates the action flow to achieve this purpose. NOTE: This option is applied only to PS Data Service. (Not support for the service such as CS Data and FAX). We recommend that DTE must wake up from sleep mode and get incoming data as soon as possible. Network operators have their own inactivation timer for data transmission. If DTE doesn t wake up from sleep mode even though RI signal is activated, the data connection may be disconnected by network RI Signal for the Specific Event DTE can wake up from sleep mode by monitoring RI pin, while it s in sleep mode. UE910 V2 FAMILY provides different RI signal type to DTE, according to the specific event. This paragraph deals with the following items: RI Signal for incoming call RI Signal for incoming SMS RI Signal for socket listen during server mode RI Signal for URC message and incoming data during power saving mode RI Signal for Incoming Call RI signal for incoming call has different signal in accordance with the value of \R and RING message is sent to DTE the instance RI signal is going to is activated, periodically. In case the value of \R is 0 or 1, RI signal and RING message like as figure 4.3 is generated. RING RING 1000ms 4000ms 1000ms 4000ms Figure 4.3 RI signal for \R0 or \R1 In case the value of \R is 2, RI signal and RING message is generated like as Figure 4.4. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 55 of 103

56 RING RING 1000ms 4000ms 1000ms 4000ms Figure 4.4 RI signal for \R RI Signal for Incoming SMS RI signal for incoming SMS has two types in accordance with the value of +CNMI or #E2SMSRI. In case +CNMI=3,1, the negative going pulse like as figure 4.5 is generated, one time ms Figure 4.5 RI Signal for +CNMI=3,1 In case #E2SMSRI = <x>, the negative going pulse like as figure 4.6 is generated, one time. #E2SMSRI value (50 ~11500 ms) Figure 4.6 RI Signal for #E2SMSRI Note: In case both +CNMI=3,1 and #E2SMSRI=<x> is issued, RI signal behavior by #E2SMSRI is ignored by +CNMI RI Signal for Socket Listen RI Signal is generated, when modem receive TCP connection request from remote client during socket server mode. This signal is the negative going pulse and is generated, one time. #E2SLRI value (50 ~11500 ms) Figure 4.7 RI Signal for #E2SLRI Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 56 of 103

57 RI Signal for Events in Power Saving Mode RI Signal for URC message and incoming data is generated, only when modem is in power saving mode. #PSMRI must be set as the value is not 0. DTE issue AT+CFUN=5 and Drop DTR pin on main UART to place modem in the power saving mode. #PSMRI value (50 ~11500 ms) Figure 4.8 RI Signal for #PSMRI Note: if RI signal for Incoming Call, SMS, Socket Listen and #PSMRI are generated at the same time in power saving mode, RI signal for #PSMRI will be ignored SMS Handling The Telit UE910 V2 FAMILY supports the Short Message Service, it is possible to store, delete, write, send and receive a SMS, which is a short text message up to 160 characters long SMS Device setup Before accessing the Short Message Service, the device has to be properly set up Select SMS Format Type The UE910 V2 FAMILY supports SMS in two different formats: PDU Text The difference is that in the PDU mode the device returns and receives SMS encoded in the format ready to be sent to the network; in TEXT mode the device converts automatically the read PDU into text and vice versa. By using TEXT mode, the PDU data encoding knowledge is not needed and operations are easier. For this reason, we are using the TEXT mode to explain how to operate with SMS. If you are familiar with PDU encoding then you can operate with PDU by selecting that format and using appropriate syntax. Where: Send AT+CMGF=<mode><cr> <mode> is the SMS format type: 0 - PDU 1 - Text wait for response NOTE: Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 57 of 103

58 This setting is stored and remains until the device is turned off. Hence, there is no need to issue it more than one time. For TEXT mode use <mode>=1. For example: 1- Let us assume you want to set TEXT format for the SMS: AT+CMGF=1<cr> response: Check SMS Service Centre Number The SMS are sent by the UE910 V2 FAMILY to a service center (SMSC) where the message is dispatched towards its final destination or is kept until the delivery is possible. To ensure a correct behavior of this service the number of the service center must be the one your network operator supports. To check which number is stored as the SMSC: send AT+CSCA?<cr> wait for response in the format: +CSCA: <number>,<type> <number> is the SMSC number <type> is the SMSC number type: international numbering scheme (number begins with "+") national numbering scheme NOTE: This setting remains stored in the SIM card until it is changed or deleted, so this operation may be done only once if the SIM Card is not changed. The setting is maintained even after power down. For example: 1- Let us assume you want to check your SMSC number: AT+CSCA? <cr> response: +CSCA: Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 58 of 103

59 Add SMS Service Centre Number (only if required) If your previously check for SMSC returned an empty field: +CSCA:,129 Or if the SMSC number stored does not correspond to the desired one, then the new number has to be stored. In this way, the previously stored number will be overwritten. send AT+CSCA=<number>,<type><cr> <number> is the desired SMSC number <type> is the SMSC number type: international numbering scheme (number begins with "+") national numbering scheme For example: wait for 1- Let us assume your desired SMSC number is (stored in international format): AT+CSCA= ,145<cr> response: Select New Messages Indication Behavior When the device receives a new message an unsolicited indication is generated, this indication may be sent to the DTE, buffered if the DTE is busy (for example during a data call) or discarded. To set the desired behavior: send AT+CNMI=<mode>,<mt>,<bm>,<ds>,<bfr><cr> Set selects the behaviour of the device on how the receiving of new messages from the network is indicated to the DTE. Parameter: <mode> - unsolicited result codes buffering option Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 59 of 103

60 0 - Buffer unsolicited result codes in the TA. If TA result code buffer is full, indications can be buffered in some other place or the oldest indications may be discarded and replaced with the new received indications. 1 - Discard indication and reject new received message unsolicited result codes when TA-TE link is reserved, otherwise forward them directly to the TE. 2 - Buffer unsolicited result codes in the TA in case the DTE is busy and flush them to the TE after reservation. Otherwise forward them directly to the TE. 3 - If <mt> is set to 1, the hardware ring line enabled for 1 second when a SMS is received while the module is in GPRS online mode. <mt> - result code indication reporting for SMS-DELIVER 0 - No SMS-DELIVER indications are routed to the TE. 1 - If SMS-DELIVER is stored into ME/TA, indication of the memory location is routed to the TE using the following unsolicited result code: +CMTI: <memr>,<index> <memr> - memory storage where the new message is stored "SM" "ME" "SR" <index> - location on the memory where SM is stored. 2 - SMS-DELIVERs (except class 2 messages and messages in the message waiting indication group) are routed directly to the TE using the following unsolicited result code: (PDU Mode) +CMT: <alpha>,<length><cr><lf><pdu> <alpha> - alphanumeric representation of originator/destination number corresponding to the entry found in MT phonebook <length> - PDU length <pdu> - PDU message (TEXT Mode) +CMT:<oa>,<alpha>,<scts>[,<tooa>,<fo>,<pid>,<dcs>, <sca>,<tosca>,<length>]<cr><lf><data> (the information written in italics will be present depending on +CSDH last setting) <oa> - originating address, string type converted in the currently selected character set (see +CSCS) Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 60 of 103

61 <alpha> - alphanumeric representation of <oa>; used character set must be the one selected with either +CSCS. <scts> - arrival time of the message to the SC <tooa>, <tosca> - type of number <oa> or <sca>: number in national format number in international format (contains the "+") <fo> - first octet of 3gpp 03.40/ <pid> - Protocol Identifier <dcs> - Data Coding Scheme <sca> - Service Centre address, string type, converted in the currently selected character set (see +CSCS) <length> - text length <data> - TP-User-Data Class 2 messages and messages in the message waiting indication group (stored message) result in indication as defined in <mt>= Class 3 SMS-DELIVERs are routed directly to TE using unsolicited result codes defined in <mt>=2. Messages of other data coding schemes result in indication as defined in <mt>=1. <bm> - broadcast reporting option 0 - Cell Broadcast Messages are not sent to the DTE 2 - New Cell Broadcast Messages are sent to the DTE with the unsolicited result code: (PDU Mode) +CBM: <length><cr><lf><pdu> <length> - PDU length <PDU> - message PDU (TEXT Mode) +CBM:<sn>,<mid>,<dcs>,<pag>,<pags><CR><LF><data> <sn> - message serial number <mid> - message ID <dcs> - Data Coding Scheme <pag> - page number <pags> - total number of pages of the message <data> - CBM Content of Message <ds> - SMS-STATUS-REPORTs reporting option Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 61 of 103

62 0 - status report receiving is not reported to the DTE 1 - the status report is sent to the DTE with the following unsolicited result code: (PDU Mode) +CDS: <length><cr><lf><pdu> <length> - PDU length <PDU> - message PDU (TEXT Mode) +CDS: <fo>,<mr>,<ra>,<tora>,<scts>,<dt>,<st> <fo> - first octet of the message PDU <mr> - message reference number <ra> - recipient address, string type, represented in the currently selected character set (see +CSCS) <tora> - type of number <ra> <scts> - arrival time of the message to the SC <dt> - sending time of the message <st> - message status as coded in the PDU 2 - if a status report is stored, then the following unsolicited result code is sent: +CDSI: <memr>,<index> <memr> - memory storage where the new message is stored "SR" <index> - location on the memory where SM is stored <bfr> - buffered result codes handling method: 0 - TA buffer of unsolicited result codes defined within this is flushed to the TE when <mode>=1..3 is entered ( response must be given before flushing the codes) 1 - TA buffer of unsolicited result codes defined within this is cleared when <mode>=1..3 is entered. NOTE: Issuing AT+CNMI<CR> is the same as issuing the Read. NOTE: Issuing AT+CNMI=<CR> is the same as issuing the AT+CNMI=0<CR>. wait for NOTE: In this description the values that are always 0 are parameter reserved for future use, in the current software revision the only value supported is 0. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 62 of 103

63 For example: 1- Let us assume you want to eliminate all the unsolicited codes that may be sent when receiving SMS & Status Report: Command AT+CNMI= 0,0,0,0,0<cr> Response: For example about a new message indication: 1- Let us assume you receive a new SMS delivery (AT+CNMI=1,1,0,0,0) and this new message is stored on the SIM "SM" storage at the location number 7; the unsolicited code you will receive (if code is enabled) is: Unsolicited code: +CMTI: "SM",7 2- Let us assume you receive a new SMS Status Report delivery (AT+CNMI=1,0,0,2,0) and this new message is stored on the SIM "SR" storage at the location number 8; the unsolicited code you will receive is: Unsolicited code: +CDSI: "SR", Set Text Mode Parameters (only in TEXT mode) When the device is set to operate with Text SMS not with PDU, the SMS parameters that usually reside on the header of the PDU must be set apart with the +CSMP. The parameters to be set are: Message Format Validity Period Protocol Identifier Data Coding Scheme The meaning and format of the parameters is: Message format, like defined for the first octet of message according to GSM 3.40/23.040: The format is an 8-bit parameter divided into 6 fields and then reported as an integer: b7 b6 b5 b4 b3 b2 b1 b0 RP UDHI SRR VPF RD MTI Where MTI message type parameter: Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 63 of 103

64 0 1 - SMS Submit SMS DELIVER RD rejects duplicates parameter 0 do not reject duplicates SMS in SC 1 - reject duplicates on SC VPF validity period format Validity period NOT present VP integer represented (relative) VP semi octet represented (absolute) reserved SRR status report request 0 - status report not requested 1 - status report requested UDHI user data Header Information 0 - No Header on PDU 1 - Header present on PDU RP reply path 0 - RP not set 1 - RP set Validity Period numerical if in relative format or string if in absolute format This parameter represents the validity period for the SMS after which the message must be disregarded instead of being delivered. If in relative format (see VPF parameter) it is an integer: 0 to corresponding to (VP + 1) x 5 minutes 144 to corresponding to 12 hours + ((VP -143) x 30 minutes) 168 to corresponding to (VP - 166) x 1 day 197 to corresponding to (VP - 192) x 1 week If in absolute format it is a string in the format: "gg/mm/yy,hh:mm:ss±tz" where gg day of expiration (2 characters) MM month of expiration (2 characters) YY year of expiration (2 characters) hh hour of expiration (2 characters) mm minute of expiration (2 characters) Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 64 of 103

65 ss second of expiration (2 characters) ± sign of the time zone (+ or -) tz time zone (2 characters) Protocol Identifier in numerical format: This parameter identifies the protocol used by the receiver entity and informs the SC that the conversion from SMS to that protocol must be done while delivering the message. Protocol ID Conversion towards 0 Implicit (default) 33 telex (or teletex reduced to telex format) 34 group 3 telefax 35 group 4 telefax 36 voice telephone (i.e. conversion to speech) 37 ERMES (European Radio Messaging System) 38 National Paging system (known to the SC) 39 Videotex (T.100/T.101) 40 teletex, carrier unspecified 41 teletex, in PSPDN 42 teletex, in CSPDN 43 teletex, in analog PSTN 44 teletex, in digital ISDN 45 UCI (Universal Computer Interface, ETSI DE/PS ) (reserved, 2 combinations) 48 a message handling facility (known to the SC) 49 any public X.400-based message handling system 50 Internet Electronic Mail (reserved, 5 combinations) values specific to each SC, usage based on mutual agreement between the SME and the SC (7 combinations available for each SC) 63 A GSM mobile station. The SC converts the SM from the received TP-Data- Coding-Scheme to any data coding scheme supported by that MS (e.g. the default). 64 Short Message Type 0 65 Replace Short Message Type 1 66 Replace Short Message Type 2 67 Replace Short Message Type 3 68 Replace Short Message Type 4 69 Replace Short Message Type 5 70 Replace Short Message Type 6 Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 65 of 103

66 71 Replace Short Message Type Reserved 95 Return Call Message Reserved 127 SIM Data download UE910 Family Software User Guide Data coding Scheme as defined by GSM in numerical format The DCS is an 8-bit parameter reported as an integer, the default value is 0, otherwise for simplicity, we report only the most useful DCS, for further Schemes refer to GSM 3.38 B7 B6 b5 b4 b3 b2 b1 b Alphabet Class where Alphabet 0 - default Alphabet 1-8 bit Class Class Class Class Class 3 NOTE: The default value for DCS = 0 represents the default SMS sent by a mobile. If you do not need any particular data coding scheme use DCS=0. Not all the DCS combinations described in the 3gpp 3.38/ are supported, both by the network and by the Telit UE910 V2 FAMILY. Some features may be not implemented at network level or at device level, resulting in a +CME ERROR: 3 (operation not allowed) result code. If this happens then use a different DCS. send AT+CSMP=<fo>,<vp>,<pid>,<dcs><cr> <fo>: Message format <vp>: Validity Period <pid>: Protocol Identifier <dcs>: Data coding Scheme wait for For example: 1- Let us assume you want to set the SMS parameters to the values: Message Format: Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 66 of 103

67 SMS submit do not reject duplicates VP Format integer (relative) status report not requested No Header on PDU Reply path not set Hence, the message format is the binary number corresponding to the integer 17. Validity period 24 hours corresponding to an integer value hours + (( ) x 30 min) = 24 hours Protocol ID implicit (SMS sent to a mobile terminal) corresponding to a value 0. DCS default value 0. AT+CSMP= 17,167,0,0 response: 2- Let us assume you want to set the SMS parameters to the values: Message Format: SMS submit do not reject duplicates VP Format semi octet (absolute) status report requested No Header on PDU Reply path not set Hence, the message format is the binary number corresponding to the integer 57. Validity period format is absolute, hence it represents the expiration date of the message and the desired expiration date is for example 29/06/02 at 02:20 in the time zone of Italy (+1). "29/06/02,02:20:00+1" Protocol ID implicit (SMS sent to a mobile terminal) corresponding to a value 0. Data Coding Scheme: Default Alphabet Class 0 (e.g. immediate display SMS) Corresponding to the binary number corresponding to the integer 240. AT+CSMP= 57,29/06/02,02:20:00+1,0,240 Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 67 of 103

68 response: Select SMS Memory and Check for Memory Space There are various types of storage where the SMS can be stored, the Telit UE910 V2 FAMILY provides two different storage: "ME" - mobile equipment memory "SM" - SIM Card memory "SR" Status report The SMS are usually stored (this is true for both the originated and the received SMS) in the SM/ME storage. The UE910 V2 FAMILY allows the user to select a different storage for the read-delete, write-send, and reception-saving SMS operations. send AT+CPMS=<memr>,<memw>,<mems><cr> <memr>: memory storage for Read and Delete s - "SM" - "ME" - "SR" <memw>: memory storage for Write and Send s <mems>: memory storage for new incoming message saving wait for response in the format: +CPMS:<usedr>,<totalr>,<usedw>,<totalw>,<useds>,<totals> where <usedr> - number of SMS stored into <memr> <totalr> - max number of SMS that <memr> can contain <usedw> - number of SMS stored into <memw> <totalw> - max number of SMS that <memw> can contain <useds> - number of SMS stored into <mems> <totals> - max number of SMS that <mems> can contain From this response you can check if the selected storage has room for new SMSs, the free positions in the storage X (where X can be r,w,s) are <totalx> -<usedx>. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 68 of 103

69 IRA Character Set UE910 Family Software User Guide The character set used in SMS text mode is the IRA. This set defines each char as a 7-bit value, hence from 0x00 to 0x7F. The table below reports all the chars supported and their hexadecimal code. To obtain the code for a char in the table remember that in the row it is reported the least significant nibble (4 bits) and in the column the most significant nibble. The empty cells correspond to reserved combinations. Least Significant Nibble For example: Most Significant Nibble 0x 1x 2x 3x 4x 5x 6x 7x x0 SP 1 P p x1! 1 A Q a q x2 " 2 B R b r x3 # 3 C S c s x4 $ 4 D T d t x5 % 5 E U e u x6 & 6 F V f v x7 ' 7 G W g w x8 ( 8 H X h x x9 ) 9 I Y i y xa LF 2 * : J Z j z xb + ; K k xc, < L l xd CR 3 - = M m xe. > N n xf /? O o 1 - SP stands for space character 2 - LF stands for Line Feed character 3 - CR stands for Carriage Return character 1- Let us assume you want to find the IRA code for the character '&': From the table you find: most significant Nibble: 2 least significant Nibble: 6 Hence the IRA code for the '&' character is the hexadecimal 0x Let us assume you have the IRA code 0x6B and you want to find the corresponding character: From the table you find at the position most significant Nibble: 6 least significant Nibble: B Hence, the character corresponding to the 0x6B IRA code is 'k'. NOTE: Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 69 of 103

70 With the AT+CSCS is possible to select the character set; the available types are: IRA - ITU-T ISO 8859 Latin 1 PCCP437 - PC character set Code Page 437. UCS2-16-bit universal multiple-octet coded character set (ISO/IEC10646) Please refer to the AT specification for the full description Writing a New SMS to Storage A new SMS can be written in the selected storage <memw> (in the current SW version only "SM" is supported) and then can be sent to the desired destination. To write the new SMS: send AT+CMGW="<da>"<cr> <da>: destination address wait for prompt ">" send SMS text (MAX 160 characters) end with CTRL-Z character (0x1A hexadecimal) or abort with ESC character (0x1B hexadecimal) wait for response: Response Reason Action +CMGW: <index> Message has been successfully proceed ahead written in position number <index> ERROR some error occurred Enable the extended error codes report (see par ) and retry. +CMS ERROR: 330 SMSC address unknown Insert SMSC address (see par ) +CMS ERROR: 322 Memory Full memory is full, hence delete some records and retry. NOTE: if is aborted with ESC character, then only the result code is returned. For example: 1- Let us assume you want to write a new SMS to the storage and the destination address is the number We suppose you already have set up the device for text SMS mode as described on the previous paragraphs: AT+CMGW=" " Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 70 of 103

71 response: > UE910 Family Software User Guide now you can insert the message text in IRA format (note that the IRA format and ASCII format coincide for the alphabet characters but not for the other). here will be inserted the SMS message text conclude text with the character CTRL-Z response: +CMGW: 3 In this case, the new SMS was successfully written to the location index 3 of the selected write memory Sending an SMS Previously Stored An already written SMS can be sent from the selected storage <memw>. To send the written SMS its location index is needed: send AT+CMSS=<index><cr> <index>: SMS location index wait for response: Response Reason Action +CMSS: <mr> Message has been successfully proceed ahead sent. <mr> represents the message reference number. ERROR some error occurred Enable the extended error codes report (see par ) and retry. +CMS ERROR: 330 SMSC address unknown Insert SMSC address (see par ) +CMS ERROR: 41 "Temporary Failure", may be that the device is not registered on any Check for signal strength and network registration network +CMS ERROR: 331 No network service Check for signal strength and network registration +CMS ERROR: 1 Unassigned number The destination address number does not exist. Check it and repeat. +CMS ERROR: 42 network congestion Retry later +CMS ERROR: 96 Mandatory information missing Check for destination address in the SMS, overwrite it and retry. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 71 of 103

72 For example: UE910 Family Software User Guide 1- Let us assume you want to send a SMS that was written to the storage index position number 3. We suppose you already have set up the device for text SMS mode as described on the previous paragraphs: AT+CMSS=3 response: +CMSS: 1 In this case, the SMS was successfully sent to the destination and its network message reference number is Sending a New SMS Without Storing It A new SMS can be sent directly to the network without storing it. send AT+CMGS="<da>"<cr> <da>: destination address wait for prompt ">" send SMS text (MAX 160 characters) end with CTRL-Z character (0x1A hexadecimal) or abort with ESC character (0x1B hexadecimal) wait for response: Response Reason Action +CMGS: <mr> Message has been successfully proceed ahead sent. <mr> represents the message reference number. ERROR some error occurred Enable the extended error codes report (see par ) and retry. +CMS ERROR: 330 SMSC address unknown Insert SMSC address (see par ) +CMS ERROR: 41 "Temporary Failure", may be that the device is not registered on any Check for signal strength and network registration network +CMS ERROR: 331 No network service Check for signal strength and network registration +CMS ERROR: 1 Unassigned number The destination address number does not exist. Check it and repeat. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 72 of 103

73 +CMS ERROR: 42 network congestion Retry later +CMS ERROR: 96 Mandatory information missing Check for destination address in the SMS, overwrite it and retry. aborted by user you issued a ESC char For example: 1- Let us assume you want to directly send a new SMS to the destination address number We suppose you already have set up the device for text SMS mode as described on the previous paragraphs: AT+CMGS=" " response: > now you can insert the message text in IRA format (note that the IRA format and ASCII format coincide for the alphabet characters but not for the other). here will be inserted the SMS message text to be sent conclude text with the character CTRL-Z response: +CMGS: 4 In this case, the new SMS was successfully sent to the SC and its network reference number is 4. Do not confuse message reference with message index position, the first indicates the network reference for identifying the sent message (the eventually requested status report will have the same reference) while the second indicates the position where the message has eventually been stored in the memory Sending a New SMS using GPRS service An SMS can be sent by means of the GPRS service. It is worth to remind that not all Network Operators support this features. AT+CGSMS=2 Examples Send the SMS message to the module itself, not store it before transmitting and use the GPRS service AT#SELINT=2 AT+CGSMS=2 Select AT interface style Select the GPRS service Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 73 of 103

74 Check if the module is attached to GPRS service AT+CGATT? +CGATT: 1 Select Text Mode. AT+CMGF=1 Select how the new received message event is indicated by the DCE to the DTE. AT+CNMI=1,1,0,0,0 Send the message to the module itself. AT+CMGS="+386X18X19X4" > SEND THE SMS BY MEANS OF THE GPRS SERVICE TO ITSELF (close the message with Ctrl Z) +CMGS: 14 The SMS is received by the module itself, the following unsolicited indication is showed on DTE: +CMTI: "SM",11 AT+CPMS="SM" +CPMS: 11,50,11,50,11,50 Use unsolicited indication parameter to read the SMS for the first time Deleting an SMS An already written/received SMS can be deleted from the selected storage. To delete the SMS its location index is needed: send AT+CMGD=<index>[,<delflag>]<cr> <index>: SMS location index, if <delflag> = 0 Test shows the valid memory locations and optionally the supported values of <delflag>. <delflag>: an integer indicating multiple message deletion request as follows: 0 (or omitted) Delete the message specified in <index> Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 74 of 103

75 1 Delete all read messages from preferred message storage, leaving unread messages and stored mobile originated messages (whether sent or not) untouched 2 Delete all read messages from preferred message storage and sent mobile originated messages, leaving unread messages and unsent mobile originated messages untouched 3 Delete all read messages from preferred message storage, sent and unsent mobile originated messages leaving unread messages untouched. 4 Delete all messages from preferred message storage including unread messages. wait for response: Response Reason Action Message has been successfully proceed ahead deleted. ERROR some error occurred Enable the extended error codes report (see par ) and retry. +CMS ERROR: 321 Invalid memory index e.g. the given record was already empty Check the <index> number and retry. For example: 1- Let us assume you want to delete a previously written SMS that was written to the storage index position number 3. We suppose you already have set up the device for text SMS mode as described on the previous paragraphs: AT+CMGD=3 response: In this case, the SMS was successfully deleted. 2- Let us assume you want to delete a received SMS that was stored to the index position number 7: AT+CMGD=7 response: Reading an SMS A new SMS can be read with the send AT+CMGR=<index><cr> <index>: SMS location index wait for response in the format: Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 75 of 103

76 Output format for received messages (the information written in italics will be present depending on +CSDH last setting): +CMGR: <stat>,<oa>,<alpha>,<scts>[,<tooa>,<fo>,<pid>, <dcs>,<sca>,<tosca>,<length>]<cr><lf><data> Output format for sent messages: +CMGR: <stat>,<da>,<alpha>[,<toda>,<fo>,<pid>,<dcs>,, <sca>,<tosca>,<length>]<cr><lf><data> Output format for message delivery confirm: +CMGR: <stat>,<fo>,<mr>,,,<scts>,<dt>,<st> <stat> - status of the message "REC UNREAD" - new received message unread "REC READ" - received message read "STO UNSENT" - message stored not yet sent "STO SENT" - message stored already sent <fo> - first octet of the message PDU <mr> - message reference number <scts> - arrival time of the message to the SC <dt> - sending time of the message <st> - message status as coded in the PDU <pid> - Protocol Identifier <dcs> - Data Coding Scheme <oa> - Originator address, string type represented in the currently selected character set (see +CSCS) <da> - Destination address, string type represented in the currently selected character set (see +CSCS) <alpha> - string type alphanumeric representation of <da> or <oa>, corresponding to an entry found in the phonebook; used character set is the one selected with +CSCS. NB: this optional field is currently not supported. <sca> - Service Centre number <tooa>,<toda >,<tosca> - type of number <oa>,<da>,<sca> number in national format number in international format (contains the "+") <length> - text length <data> - TP-User_data Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 76 of 103

77 If <dcs> indicates that GSM03.38 default alphabet is used, each character of GSM alphabet will be converted into current TE character set (see +CSCS) If <dcs> indicates that 8-bit or UCS2 data coding scheme is used, each 8-bit octet will be converted into two IRA character long hexadecimal numbers (e.g. octet 0x2A will be converted as two characters 0x32 0x41) Note: in both cases if status of the message is 'received unread', status in the storage changes to 'received read'. An error result code is sent on empty record <index>. For example: 1- Let us assume you want to read the SMS that is stored at the position index 4. We suppose you already have set up the device for text SMS mode as described on the previous paragraphs: Command AT+CMGR=4 Response: +CMGR: "STO UNSENT"," " Telit Test Message for Text Mode SMS. In this case the SMS was successfully read, the text contained was: "Telit Test Message for Text Mode SMS." The message was written to the storage by user (STO) but still not sent (UNSENT) to the destination address with the number Let us assume you want now to read the SMS that is stored at the position index 5: Command AT+CMGR=5 Response: +CMGR: "REC UNREAD"," ",,"29/06/01,12:30:04+01" Telit Test Message for Text Mode SMS RECEIVING. In this case the SMS was successfully read, the text contained was: "Telit Test Message for Text Mode SMS RECEIVING." The message was received (REC) from the number at 12:30:04 the day 29/06/01 in the European time zone +1. After this read the message at index 5 becomes REC READ Listing a Group of SMSs The SMS can be grouped into 5 different groups depending on their status: REC UNREAD received messages still not read Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 77 of 103

78 REC READ received messages already read STO UNSENT written messages not yet sent STO SENT written messages already sent ALL all types of messages It is possible to have the list of all the messages in one group: Where: send AT+CMGL=<stat><cr> <stat> - status group of the message "REC UNREAD" - new message "REC READ" - read message "STO UNSENT" - stored message not yet sent "STO SENT" - stored message already sent "ALL" - all messages wait for response in the format: For every message in the group: +CMGL: <index>,<stat>,<oa/da> [,,,<tooa/toda>,<length>] <CR><LF><text> <index> - message index position on the storage <stat> - status of the message "REC UNREAD" - new message "REC READ" - read message "STO UNSENT" - stored message not yet sent "STO SENT" - stored message already sent <oa/da> - sender number/destination number <tooa/toda> - type of number <oa/da> international number (contains "+" character) national number <length> - length of the message text in characters <text> - message text UE910 Family Software User Guide Note: If status of the message is 'received unread', status in the storage changes to 'received read'. For example: Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 78 of 103

79 1- Let us assume you want to list all the SMS received read that are stored. We suppose you already have set up the device for text SMS mode as described on the previous paragraphs: AT+CMGL="REC READ" response: +CMGL: 5, "REC READ"," " Telit Test Message for Text Mode SMS RECEIVING. +CMGL: 8, "REC READ"," " Telit Second Test Message for Text Mode SMS RECEIVING. In this case the SMS group was successfully read, the messages Received UNREAD were two in the position indexes 5 & 8. The optional parameters <tooa/toda> and <length> were not shown Cell Broadcast Service GSM Standard specifies two different types of SMS: SMS Point to Point (SMS/PP), SMS Cell Broadcast (SMS/CB). The first type can send a text message long up to 160 characters from a module to the another (as stated on the previous paragraphs), the second type allows the Network to send, at the same time, a message to all modules contained in the defined area including one or more radio cells. The availability and the implementation of the Cell Broadcast Service are strictly connected with the Network Operator of the subscriber. Use the following AT to enable the Cell Broadcast Service: AT+CSCB=[<mode>[,<mids>[,<dcss>]]] Example Select Text Mode. AT+CMGF=1 Select the District service. AT+CSCB=0,50,0 Select how the new received message event is indicated by the DCE to the DTE. AT+CNMI=2,0,2,0,0 After a while the District broadcast message is displayed on the DTE. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 79 of 103

80 +CBM: 24,50,1,1,1 TRIESTE +CBM: 4120,50,2,1,1 TRIESTE +CBM: 8216,50,1,1,1 TRIESTE +CBM: 12312,50,2,1,1 TRIESTE The following list of Services can be provided by the Network Operator, it is not mandatory: <mids> Service name 000 Index 010 Flashes 020 Hospitals 022 Doctors 024 Pharmacy 030 Long Distant Road Reports 032 Local Road Reports 034 Taxis 040 Weather 050 District 052 Network Information 054 Operator Services 056 Directory Inquiries (national) 057 Directory Inquiries (international) 058 Customer Care (national) 059 Customer Care (international) Reading concatenated SMS Use the following AT to read concatenated SMSs: AT#CMGLCONCINDEX Example Check the number of stored SMSs AT+CPMS? +CPMS: "SM",6,30,"SM",6,30,"SM",6,30 6 SMSs are stored. Check if concatenated SMSs are stored AT#CMGLCONCINDEX Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 80 of 103

81 No concatenated SMSs are stored Set up Text Mode AT+CMGF=1 Set SMS parameters AT+CSMP=17,167,0,242 Store two concatenated SMSs (they are indicated with two colors): AT+CMGW= "+3932X056Y6X8" > CMGW: 8 Check the number of SMSs stored on the SM storage type AT+CPMS? +CPMS: "SM",8,30,"SM",8,30,"SM",8,30 Check the concatenated SMSs presence AT#CMGLCONCINDEX #CMGLCONCINDEX: 2,7,8 2 SMSs are concatenated. Their storage positions are: 7, 8. AT+CMGR=7 +CMGR: "STO UNSENT"," ","" B219AD66BBE172B0986C46ABD96EB81C2C269BD16AB61B2E078BC 966B49AED86CBC162B219AD66BBE172B0986C46ABD96EB81C2C269BD16AB61B2E 078BC966B49AED86CBC162B219AD66BBE172B0986C46ABD96EB81C2C269BD16AB 61B2E078BC966B49AED86CBC162B219AD66BBE56031D98C56B3DD C36A3D 56C375C0E1693CD68 AT+CMGR=8 +CMGR: "STO UNSENT"," ","" AB61B2E07CBE16EB61A6D268BC172B89BAD469BC96230 Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 81 of 103

82 5.7. Using General Purpose Input/output pins UE910 Family Software User Guide The Telit UE910 V2 FAMILY provides various General Purpose Input/output pins, these pins can be configured via AT s as Inputs, Outputs and two of them as "alternate function". With these pins your application can control external hardware directly using the Telit UE910 V2 FAMILY pins, with little or even no hardware added GPIO pin setup Before using the GPIO pin, you must configure them to select their direction or alternate function Setting GPIO pin as OUTPUT When you set a GPIO as output, you must specify also the value that the pin output must take: send AT#GPIO=<pin>,<value>,1<cr> <pin> is the GPIO pin number at which the applies: For UE910 V2: 1 - GPIO1 6 - GPIO6 2 - GPIO2 7 - GPIO7 3 - GPIO3 8 - GPIO8 4 - GPIO4 9 - GPIO9 5 - GPIO GPIO10 <value> is the GPIO pin value that the pin will assume: 0 - LOW 1 - HIGH NOTE: wait for response The #GPIO setting is not saved and will be lost on power off, so at start-up repeat pin initialization s. At start-up the setting for GPIO6 instead is maintained even after a shutdown to permit alarm feature to work always. For example: 1- Let us assume you want to set GPIO3 pin as Output and you want it to be in LOW status: AT#GPIO=3,0,1<cr> response: Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 82 of 103

83 In this case, the GPIO3 pin was successfully put in output direction and its status has been set to LOW Setting GPIO pin as INPUT When you set a GPIO as input, you must specify also a dummy value for the pin state: send AT#GPIO=<pin>,<dummy_value>,0<cr> <pin> is the GPIO pin number at which the applies: For UE910 V2: 1 - GPIO1 6 - GPIO6 2 - GPIO2 7 - GPIO7 3 - GPIO3 8 - GPIO8 4 - GPIO4 9 - GPIO9 5 - GPIO GPIO10 <value> is a dummy value can be either: 0 - dummy value 1 - dummy value NOTE: wait for response The #GPIO setting for all GPIO except from GPIO6 is not saved and will be lost on power off, so at start-up repeat pin initialization s. At start-up all the GPIOs except from GPIO6 are configured by default as INPUT, but the setting for GPIO6 instead is maintained even after a shutdown to permit alarm feature to work always. For example: 1- Let us assume you want to set GPIO4 pin as Input: AT#GPIO=4,0,0<cr> response: In this case, the GPIO4 pin was successfully put in input direction. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 83 of 103

84 GPIO pin use After having set-up the GPIO pin direction you can query the input status of an INPUT pin or set the output status of an OUTPUT pin Querying GPIO pin status To query for the pin status: send AT#GPIO=<pin>,2<cr> <pin> is the GPIO pin number at which the applies: For UE910 V2: 1 - GPIO1 6 - GPIO6 2 - GPIO2 7 - GPIO7 3 - GPIO3 8 - GPIO8 4 - GPIO4 9 - GPIO9 5 - GPIO GPIO10 wait for response in the format: #GPIO: <dir>,<stat> <dir> - GPIO<pin> direction setting <stat> - status of the pin 0 - LOW 1 HIGH NOTE: In case the GPIO pin direction is set to ALTERNATE FUNCTION, then the reported <stat> has no meaning and must not kept as valid, but must be threaten as a dummy value. The query reports depending on the pin direction: - the read pin status in case the direction is input; - the previously set pin status in case the direction is output. In any case, you can know if the pin at the query moment is high or low and the pin direction. For example: Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 84 of 103

85 1- Let us assume you want to query the GPIO3 pin for its status: AT#GPIO=3,2<cr> response: #GPIO: 0,1 UE910 Family Software User Guide In this case, the GPIO3 pin was set in input direction and its status has been measured to be HIGH. 2- Let us assume you want to query the GPIO4 pin for its status: AT#GPIO=4,2<cr> response: #GPIO: 1,0 In this case, the GPIO4 pin was set in output direction and its status is LOW. 3- Let us assume you want to query the GPIO6 pin for its status: AT#GPIO=6,2qcr> response: #GPIO: 3,0 In this case, the GPIO6 pin was set in "alternate function" direction and therefore works as alarm output. The reported status = LOW has no meaning Setting GPIO Pin Output Status To set the pin status (when pin is set as OUTPUT): send AT#GPIO=<pin>,<value>,1<cr> <pin> is the GPIO pin number at which the applies: 1 - GPIO1 6 - GPIO6 2 - GPIO2 7 - GPIO7 3 - GPIO3 8 - GPIO8 4 - GPIO4 9 - GPIO9 5 - GPIO GPIO10 Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 85 of 103

86 <value> is the pin value to be set and can be: 0 - LOW 1 - HIGH wait for response For example: 1- Let us assume you want to set the GPIO3 pin HIGH: AT#GPIO=3,1,1<cr> response: In this case, the GPIO3 pin was set in output direction and its status has been set to HIGH Using GPIO6 pin as ALARM OUTPUT (alternate function) When you set the GPIO6 pin as alarm output function, the pin reports the alarm state following the +CALA settings. To set the pin in alternate function you must specify also a dummy value for the pin state: send AT#GPIO=6,<dummy_value>,3<cr> <value> is a dummy value can be either: 0 - dummy value 1 - dummy value NOTE: Remember that the alternate function places the GPIO6 pin always in OUTPUT direction and since the GPIO6 pin value is controlled by the internal software, the corresponding function (+CALA) must be setup properly. The #GPIO6 direction setting is saved and will be kept after a power off. wait for response For example: 1- Let us assume you want to set GPIO6 pin as ALARM OUTPUT: AT#GPIO=6,0,3<cr> response: Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 86 of 103

87 In this case, the GPIO6 pin was successfully put in alarm output direction Clock/Alarm Function UE910 Family Software User Guide The Telit UE910 V2 FAMILY provides a Real Time Clock and Alarm embedded in the product; it is therefore possible to set-up the proper time, check the actual time, set-up an alarm time at which the alarm will be triggered with various behavior depending on the +CALA setting. The only requirement is that the power input to the Telit UE910 V2 FAMILY has to be guaranteed without interruptions, the Telit UE910 V2 FAMILY has no backup battery; therefore it will lose the time setting if its power supply is interrupted. On Alarm trigger the Telit UE910 V2 FAMILY can: automatically Wake-up fully operative from shutdown as if the ON/OFF automatically Wake-up from shutdown in a special status namely "alarm status" where it will not look for or try to register into any network, as if it would be off, except from the fact that it proceeds with the alarm action and it can receive s to return completely operative or shutdown immediately. If already ON at alarm trigger time, simply proceed with the Alarm action Once Woken-up the Telit UE910 V2 FAMILY proceeds with the chosen action that can be issue an unsolicited code "+ALARM: <user_text>" on the serial port until a 90s timeout expires or a special Wake-up is received play an Alarm tone until a 90s timeout expires or a special Wake-up is received rise the pin GPIO6 until a 90s timeout expires or a special Wake-up is received any combination of these actions With these features, the Telit UE910 V2 FAMILY for example can: Wake-up itself and its controlling hardware by using the GPIO6 pin at the desired time, so timely surveys can be programmed without the need to keep the any hardware on and therefore reducing power consumption to a minimum. Activate some special hardware on time trigger event with the GPIO6 pin. Alert the controlling application that the alarm time has come with the unsolicited code "+ALARM:<user_text>". Alert the user with the alarm tone played Clock Date/Time Before using the Alarm feature, you must regulate the internal clock Regulate the Clock send AT+CCLK="<time>"<cr> Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 87 of 103

88 <time> - current time as quoted string in the format : "yy/mm/dd,hh:mm:ss±zz" yy - year (two last digits are mandatory), range is MM - month (two last digits are mandatory), range is dd - day (two last digits are mandatory), range is (if the month MM has less than 31 days, the clock will be set for the next month) hh - hour (two last digits are mandatory), range is mm - minute (two last digits are mandatory), range is ss - seconds (two last digits are mandatory), range is ±zz - time zone (indicates the difference, expressed in quarter of an hour, between the local time and GMT; two last digits are mandatory), range is Note: If the parameter is omitted the behavior of Set is the same as Read. NOTE: wait for response Remember that the string time has to be encapsulated in double brackets. The time will start immediately after the time setting. For example: 1- Let us assume you want to regulate your clock to 7 November 2002 at 12h 24m 30s for the time zone +01h central Europe: Command AT+CCLK="02/11/07,12:24:30+04"<cr> Response: In this case, the time was successfully set Read the Current Date/Time send AT+CCLK?<cr> wait for response in the format: +CCLK: <time> Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 88 of 103

89 Note: the three last characters of <time> are not returned by +CCLK? Because the ME doesn t support time zone information. For example: 1- Let us assume you want now to read the current time: Command AT+CCLK?<cr> Response: +CCLK="02/11/07,12:26:47"<cr> In this case the current date/time is: 7 November h 26m 47s Alarm Function Once the current time has been set, the alarm function can be setup Regulate the Alarm Time & Behavior Where: send AT+CALA="<time>",0,<type>,"<text>"<cr> <time> is the Alarm time string in the same format of the clock setting yy/mm/dd,hh:mm:ss±zz yy: two digits year (00-99) MM: two digits month (01-12) dd: two digits day (01-31) hh: two digits hour (00-24) mm: two digits minute (00-60) ss: two digits seconds (00-60) ±zz: signed two digits timezone ( ) <type> is the Alarm behavior: 0 - reserved for other equipment use. 1 - the MODULE simply wakes up fully operative as if the ON/OFF button had been pressed. If the device is already ON at the alarm time, then it does nothing. 2 - the MODULE wakes up in "alarm mode" if at the alarm time it was off, otherwise it remains fully operative. In both cases the MODULE issues an unsolicited code every 3s: +ALARM: <text> Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 89 of 103

90 <text> is the +CALA optional parameter previously set. The device keeps on sending the unsolicited code every 3s until a #WAKE or #SHDN is received or a 90s timeout occurs. If the device is in "alarm mode" and it does not receive the #WAKE within 90s then it shuts down. (default) 3 - the MODULE wakes up in "alarm mode" if at the alarm time it was off, otherwise it remains fully operative. In both cases the MODULE starts playing the alarm tone on the selected path for the ringer (see #SRP) The device keeps on playing the alarm tone until a #WAKE or #SHDN is received or a 90s timeout occurs. If the device is in "alarm mode" and it does not receive the #WAKE within 90s then it shuts down. 4 - the MODULE wakes up in "alarm mode" if at the alarm time it was off, otherwise it remains fully operative. In both cases the MODULE brings the pin GPIO6 high, provided its <direction> has been set to alarm output, and keeps it in this state until a #WAKE or #SHDN is received or a 90s timeout occurs. If the device is in "alarm mode" and it does not receive the #WAKE within 90s then it shuts down. 5 - the MODULE will make both the actions as for <type>=2 and <type>= the MODULE will make both the actions as for <type>=2 and <type>= the MODULE will make both the actions as for <type>=3 and <type>= the MODULE wakes up in "alarm mode" if at the alarm time it was off, otherwise it remains fully operative. In both cases the MODULE sets High the RI output pin. The RI output pin remains High until next #WAKE issue or until a 90s timer expires. If the device is in "alarm mode" and it does not receive the #WAKE within 90s. After that it shuts down. <text> - unsolicited alarm code text string. It has meaning only if <type> is equal to 2 or 5 or 6. Wait for response NOTE: If you use the GPIO6 pin as ALARM OUTPUT, then you MUST set its direction to "alternate function" (see par ) otherwise the pin does not respond to the alarm settings. In case the alarm mode is equal to 1,3,7 then a dummy empty text is inserted "". If you use the unsolicited codes +ALARM: <text>, then you must fix the port speed rate (see par ) and store it in the active profile (see &W), in order to make the Telit UE910 V2 FAMILY boot with the desired port speed, otherwise at the alarm wakeup, the module starts with the default port speed that may differ from yours. Remember that the string time has to be encapsulated in double brackets, furthermore the Alarm time is computed for different time zone, therefore the alarm time always refers to the same time zone as the clock setting regardless the time zone set in the +CALA. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 90 of 103

91 Stop the Alarm Activity UE910 Family Software User Guide When the alarm time expires, the module starts the alarm activity according to the alarm behavior parameter <type> selected. To stop the Alarm activity there are three ways, you can either decide to exit from alarm and shutdown the device or exit from alarm and entering the normal operational status; otherwise you can leave the alarm go on until the 90s timeout is reached Exit from the alarm status and shutdown send AT#SHDN<cr> wait for response At the result code, the device will end alarm activity and shutdown Exit from the alarm status and enter the normal operating mode send AT#WAKE=0<cr> wait for response At the result code, the device will end alarm activity and enter normal operating mode. If the device was already in normal operating mode (alarm has started when the module was already ON), then with the only the alarm activity is terminated Querying the Alarm Status When the device awakes by means of an alarm time expire, the module starts the alarm activity but not the network activity, permitting some operations to be done by the controlling application without registering the mobile in the network. To check if the mobile is in the "alarm status" and therefore no network activity is done or if the device is in normal operating status: +WAKE: <status> send AT#WAKE?<cr> wait for response in the format: <status> is the operating mode: 0 - normal operating mode 1 - alarm mode NOTE: If the device is in the alarm mode no network activity is done, therefore the only s that are accepted are the #WAKE and #SHDN ones. When in the alarm mode, no operation is allowed towards the network, therefore it is not possible to receive or send calls, SMS and whatever WCDMA/GSM/GPRS services. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 91 of 103

92 Alarm operation example For example: 1- Let us assume you have a battery powered device, a meteorological unit that measures every hour the conditions and therefore needs to send a new SMS every hour to the central server, for example indicating the weather status just measured. Let say your application must consume the absolute minimum power to achieve the job, since it will be placed in a remote position where its battery must last as long as possible and therefore it must shutdown completely and wake up every hour for just the time needed to measure & send the weather, successively shutdown. set up the time in the internal clock (only the first time) AT+CCLK="02/11/07,12:24:30+01"<cr> response set up the next alarm in order to raise the GPIO6 pin to power up the controlling application too. AT+CALA="02/11/07,13:24:30+01",0,6,"TIME TO MEASURE & SMS!"<cr> response - shutdown the UE910 V2 FAMILY and successively the controlling application. AT#SHDN<cr> response after an hour.. The UE910 V2 FAMILY will turn itself ON in "Alarm Mode" and contemporarily both raise the GPIO6 pin which turns on the power to the controlling application and issue every 3s an unsolicited code +ALARM: TIME TO MEASURE & SMS! turn on the keep alive line in the controlling application that keeps itself ON. stop the alarm activity in the UE910 V2 FAMILY (recognized by the +ALARM unsolicited code) and bring the UE910 V2 FAMILY in operating mode AT#WAKE=0<cr> response take the weather measure Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 92 of 103

93 send the SMS with the weather data (see Sending a New SMS Without Storing It par RMAT Sending a New SMS Without Storing It} par ). read the current time. AT+CCLK?<cr> response +CCLK="02/11/07,13:24:47"<cr> calculate & set up the next alarm in order to raise the GPIO6 pin to power up the controlling application too. AT+CALA="02/11/07,14:24:47+01",0,6,"TIME TO MEASURE & SMS!"<cr> response shutdown the UE910 V2 FAMILY and successively the controlling application. AT#SHDN<cr> response Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 93 of 103

94 6. Packet Switched Data operations 6.1. Introduction The Packet Switched Data (PSD) connection on GPRS, EDGE, WCDMA and HSDPA network permits DATA transfers in a completely different way with respect to previous point to point communications made with Circuit Switch Data (CSD) connection on GSM and WCDMA network. In CSD operations the modem establishes a connection with the other party (another modem) in such a way that all the Network devices in between are transparent to the data exchanged, simulating a real point to point connection, just as if the other party is directly connected with the controlling application of the modem. The other party can be either an Internet Service Provider (ISP) or a private server, but in any case, the arrival point must have a modem to connect to (Landline, ISDN or GSM/WCDMA CSD). The connection establishment procedure defines a particular path where all the information exchanged between the two peers flows and this path is reserved for exclusive use of these 2 peers for all the time the connection is active. This approach has the drawbacks of a long time to set-up the link between the two peers (up to a minute) and a time counting bill which proceeds even if no data is exchanged because the path resources are reserved anyway; furthermore the speed of the data transfer is limited to bps. An example of this kind of operation is shown in the following picture, where the point to point connection is between the two peers as if all the devices inside the dashed line are not present: Wireless Cellular CSD interconnectivity Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 94 of 103

95 In PSD operations instead, the connection is made directly towards internet as if the PSD modem which support GPRS/EDGE/WCDMA/HSDPA was a network IP socket interface. There is no data path reserved for the data exchange between the two peers, instead the resources are allocated dynamically on demand and the data exchanged is organized into packets typically TCP/IP, furthermore the maximum transfer speed can be much faster than GSM CSD. An example of PSD connection is shown in the following picture, where the PSD connection is between the PSD modem and the internet as if all the devices inside the dashed line are not present: Wireless Cellular PSD interconnectivity Due to this kind of connection, when activating the PSD connection you must provide the network parameters to enter through the internet point of the GPRS/EDGE/WCDMA/HSDPA network ISP (Internet Service Provider) and not the phone number to be dialed. Therefore, it is not possible to establish a direct point-to-point PSD connection between two modems as in CSD case. Instead an internet tunneling must be done to achieve a point to point connection between two peers. This approach as the immediate advantage of projecting the controlling application of the PSD modem directly on the internet, ready to be accessed virtually from anywhere in the world at the same cost on the GPRS/EDGE/WCDMA/HSDPA network. Actually the billing of the PSD connection is based on the amount of data exchanged (number of packets transferred) independently from the time the connection is active or where these packets must be delivered. Therefore, it is possible to leave the controlling application always connected and ready to receive/send data on demand, while paying only for the data really exchanged. The drawback of the PSD connection is that the controlling application must have its own TCP/IP protocol stack embedded to decode the packets that arrive from GPRS/EDGE/WCDMA/HSDPA network and encode the ones to be sent through the internet. There are few considerations than must be done on the PSD connections: the GPRS connection speed with a GPRS class 12 multislot device is asymmetrical, 4 time slots in reception (80000 bps max in CS4), 4 time slot in sending (80000 bps max in CS4) and 5 time slot in active(tx time slot + rx time slot). Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 95 of 103

96 the EDGE connection speed with an EDGE class 12 multislot device is asymmetrical, 4 time slots in reception ( bps max in MCS9), 4 time slot in sending ( bps max in MCS9) and 5 time slot in active(tx time slot + rx time slot). The WCDMA connection speed is symmetrical, 384kbps in reception and sending. The HSDPA connection speed with a category 8 device is asymmetrical, 7.2Mbps in reception and 384kbps in sending. The controlling application of the module must have a TCP/IP - PPP software stack to interface with the PSD modems. The controlling application must relay on some ISP that may be the Network Operator of the SIM or USIM to gain access to the internet through the PSD connection. Because of the point before, the receiving application must have internet access either. Since the communication is based upon TCP/IP packets, then it is possible to talk contemporarily with more than one peer. When required, the data security in internet must be guaranteed by security protocols over the TCP/IP that must be managed by the controlling application. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 96 of 103

97 7. Service and Firmware Update The Telit Modules firmware is updated through the Serial Interface normally used for the AT Commands. It is suggested to provide an RS232 interface on the User Printed Circuit Board (where the Telit Module is soldered) to perform the physical connection between the Telit module and a Windows-based PC. That simple circuitry makes the firmware updating easy when a new firmware version is released. During the User Application development or evaluation phase of the Telit module, the RS232 interface or the USB port implemented on the Telit Evaluation Kit (EVK2) [6] can be used to connect the Telit module to a Windows-based PC on which a dedicated tool for firmware updating is running. Telit provides the User with two tools to update the firmware of the module. The following paragraphs describe them. NOTE: GT terminals are complete encased modems. They do not need the Telit Evaluation Kit (EVK2) to perform testing, evaluation and Firmware Update. NOTE: UART flow-control is not used while Firmware is updated and log messages is output through the Serial Interface Step-by-Step Upgrade Procedure (TFI) The firmware update can be done with a specific software tool provided by Telit that runs on Windows based PCs. First the program will erase the content of flash memory, and then the program will write on the flash memory. To update the firmware of the module, we suggest the following procedure: Run the file TFI_xxxx.exe. The following window must be displayed, select the language preferred by pressing the correspondent button. The End User License Agreement will appear. Please, read it and accept the terms if you are going to proceed. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 97 of 103

98 Press to the initial message. Note: In connection with the UE910 V2 FAMILY modules, charged battery has to be understood that the power supply must not be disconnected during the firmware update. Download ready screen If Diagnostic COM Port is automatically detected then the baudrate is fixed to But automatically port detection is depending on Window OS and it is targeting on Window XP. If COM Port is not detecting then must recheck that connecting status of modem USB cable and USB driver installation. Firmware Version displayed on Title bar is new firmware version and this version will be updated to the module. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 98 of 103

99 Select the right COM port and speed. Note that to go faster than you need a special hardware on the PC. Then Press the Download button and within 5 seconds power-on the UE910 V2 FAMILY. Firmware Version displayed on Title bar is current firmware version. Wait for the end of programming green message. The Telit UE910 V2 FAMILY module is now programmed with the new firmware. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 99 of 103

100 7.2. XFP Tool The firmware update of the module can be performed with the Xfp Tool provided by Telit. It runs on Windows based PCs. It erases the flash memory content, and then it downloads the new firmware on the flash memory Step-by-Step Upgrade Procedure To update the Telit Module firmware, follow the procedure: 1. collect information about the Telit Module and Software version using the following AT s: AT+CGMR<cr>, returns the Software version information; AT+CGMM<cr>, returns the Telit Module identification. 2. Switch OFF the Telit Module. 3. Run the Xfp.exe tool, the following windows are displayed. Power OFF the module if needed then press button. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 100 of 103

101 4. After pressing button on the screen is displayed only the following windows. 5. After selecting COM port, speed 1 and stream file (stream files holds new firmware) press Program button, a flashing blue bar appears on the displayed window. The following window is displayed on the screen. 1 To use speed greater than Bps a dedicated hardware on PC is needed. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 101 of 103

102 6. After powering ON the module the following window is displayed on the screen. The programming is in progress 7. The following window is displayed on the screen when the module is successfully programmed. 8. Now the Telit module is programmed with the new firmware. Press button and exit the tool. Reproduction forbidden without written authorization from Telit Wireless Solutions Co., Ltd.- All Rights Reserved. Page 102 of 103